A dark web service called Nexus breached an identity verification company and obtained 153 million U.S. and Canadian driver's licenses and 3 million travel documents, potentially exposing high-ranking government officials. The breach, linked to IDScan, poses national security risks as adversaries like China and Russia can use such identity data to target intelligence officials and counter American operations.
IDScan.net, a cloud-based identity-verification platform, disclosed unauthorized access to customer data including full names and government-issued identification numbers around September 1, 2026. Investigative reporting linked the incident to a dark web marketplace called Nexus selling over 153 million U.S. and Canadian driver's license scans, though IDScan.net has not confirmed the connection. The company is offering free credit monitoring and identity protection services to affected individuals.
A breach at ID verification company IDScan.net exposed driver's license data for over 150 million people in the U.S. and Canada, with scans appearing for sale on the dark web through an identity theft service called Nexus. The FBI is investigating, and affected individuals should monitor their credit, freeze their accounts, and consider filing police reports to protect against identity theft and fraud.