IDScan confirms breach of 153 million driver's licenses

IDScan, a North American identity verification company, has confirmed a massive data breach affecting over 153 million driver's licenses from the United States and approximately 1.1 million from Canada. The breach went undetected for roughly one year.

Cybersecurity researcher Brian Krebs first reported the incident after discovering a dark web site named ‘Nexus’ offering access to a vast database. The stolen information includes not only names and license numbers but also high-resolution scans of the front and back of documents, including infrared and ultraviolet images. The database also reportedly contains 10 million identity cards, 3 million travel documents, and nearly 580,000 medical cards.

IDScan serves various sectors, including hospitality, car rentals, and cannabis dispensaries. Its client list includes major corporations such as Hertz, Target, and Caesars Entertainment. The FBI's New Orleans field office is currently investigating the matter. IDScan has stated it is working with external experts and will provide credit monitoring and identity theft protection services to those affected.