[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

9 clusters · 56 sources · 29 days · First seen · Last updated

North American driver's license data breach

Overview

A massive data breach involving the dark web marketplace Nexus has exposed approximately 170 million identity records. The leaked trove includes over 153 million driver’s licenses from the United States and Canada, 10 million other forms of identification, 3 million travel documents, and at least 579,000 medical cards. Cybersecurity journalist Brian Krebs confirmed the authenticity of the data after criminals provided a copy of his own driver’s license as proof. The breach also includes sensitive identification for high-profile figures, such as U.S. Defense Secretary Pete Hegseth and an assistant director of the FBI.

IDScan, a Louisiana-based identity verification technology company used by services such as Hertz, has confirmed the breach. The company stated the incident went undetected for roughly one year and targeted its cloud infrastructure. IDScan serves various sectors, including hospitality, car rentals, and cannabis dispensaries, with a client list including Target and Caesars Entertainment. The FBI’s New Orleans field office and the Pentagon have acknowledged the incident.

In response, the Office of the Privacy Commissioner of Canada (OPC) has launched an investigation to determine if IDScan.net complied with the Personal Information Protection and Electronic Documents Act (PIPEDA). Privacy Commissioner Philippe Dufresne is examining whether the company’s security safeguards were adequate, its notification processes, and its compliance with federal privacy legislation. Experts warn that because the breach involves sensitive digital copies—including full names, dates of birth, addresses, signatures, and license numbers—the stolen details cannot be easily replaced, significantly increasing the risk of identity theft, fraudulent account openings, and phone number hijacking. IDScan has indicated it is working with external experts and will provide credit monitoring and identity theft protection services to those affected. The company is currently facing multiple class-action lawsuits.

Entities

IDScan.net · FBI · Brian Krebs · Nexus · Pete Hegseth

Timeline

  1. [TECHNOLOGY] 2 sources
    IDScan.net confirms data breach affecting 153 million driver's licenses

    IDScan.net confirmed a five-month data breach of its VeriScan platform, potentially exposing the personal IDs and passport details of up to 153 million people in the US and Canada.

  2. [TECHNOLOGY] 2 sources
    Canada investigates major identity document data breach

    Canada's Privacy Commissioner is investigating a major data breach at IDScan.net involving digital copies of driver's licenses and other sensitive identification documents.

  3. [TECHNOLOGY] 4 sources
    Canada investigates massive IDScan.net data breach

    Canada's Privacy Commissioner is investigating a massive IDScan.net data breach that potentially exposed millions of driver's licences and government IDs across North America.

  4. [TECHNOLOGY] 3 sources
    Canada privacy commissioner investigates massive driver’s licence hack

    Canada’s privacy commissioner is investigating a massive hack that reportedly exposed millions of North American driver’s licences on the dark web, potentially involving IDScan.net.

  5. [TECHNOLOGY] 5 sources
    IDScan confirms massive data breach affecting 150 million people

    Identity verification firm IDScan confirmed a cloud breach affecting over 150 million US and Canadian citizens, leaking driver's licenses and personal data, including records of high-ranking officials.

  6. [TECHNOLOGY] 2 sources
    IDScan confirms breach of 153 million driver's licenses

    Identity verification firm IDScan confirmed a year-long data breach exposing over 153 million driver's licenses and millions of other identity documents across the US and Canada.

  7. [TECHNOLOGY] 8 sources
    Nexus data breach exposes 170 million identity records

    A dark-web marketplace called Nexus has leaked roughly 170 million records, including 153 million U.S. and Canadian driver’s licenses, threatening global identity verification systems.

  8. [TECHNOLOGY] 6 sources
    FBI investigates dark web marketplace selling millions of driver's licenses

    The FBI is investigating a dark web marketplace called ‘Nexus’ that allegedly sold over 153 million driver's licenses from the US and Canada, potentially sourced from a Louisiana identity verification firm.

  9. [TECHNOLOGY] 28 sources
    Nexus dark web service sells 153 million stolen driver's licenses

    The FBI is investigating a massive dark web data breach via the Nexus service, which allegedly sells over 153 million driver's license scans from the US and Canada, including those of high-ranking officials.

Sources

20minutos.es · americafirstreport.com · au.pcmag.com · baogialai.com.vn · bitmat.it · boingboing.net · ca.news.yahoo.com · ca.sports.yahoo.com · ciente.io · cnet.com · cyberinsider.com · cybernoz.com · cybersecitalia.it · detlionblood32.wordpress.com · diebewertung.de · drweb.de · europesays.com · fanpage.it · freerepublic.com · giaoducthoidai.vn · gigazine.net · gizmodo.com · globalnews.ca · goniec.net · govtech.com · hawaiitribune-herald.com · ictjournal.ch · innovations.fr · it-boltwise.de · japan.cnet.com · koutipandoras.gr · krebsonsecurity.com · ledecodeur.ch · metro.co.uk · mobilepaymentstoday.com · nemosnewsnetwork.com · news.bitcoin.com · nypost.com · pcauthority.com.au · pymnts.com · rockyharbour.ca · san.com · security.nl · shiftdelete.net · singtaousa.com · soha.vn · techcrunch.com · thecooldown.com

This summary has been updated 8 times: see revision history