FBI Investigated Breach of 153 Million Driver ID Scans
The dark-web marketplace Nexus listed millions of stolen scans traced to a Louisiana company.
Updated on Sept. 27, 2026 in Cybersecurity
Live Poll
Do you trust that companies today are doing enough to protect your sensitive personal data?
The FBI launched an investigation after a dark-web marketplace advertised 153 million North American driver's license scans. Security researchers traced the breach to the Louisiana-based firm idscan.net.
Why it matters
The breach compromised highly sensitive government and personal identification records, prompting law enforcement to act due to the extreme scale of the leaked data.
The stolen cache included 10 million ID cards, 3 million travel documents, and 580,000 medical cards. These records were identified through transaction timestamps matching IDs shown at rental counters.
The players
FBI
The Federal Bureau of Investigation is the domestic intelligence and security service of the United States.
idscan.net
This Louisiana-based company provides identity verification software for various commercial businesses.
Nexus
Nexus was a dark-web marketplace used to facilitate the sale of illicit digital goods.
The details
Legal teams have filed class-action lawsuits in Louisiana alleging that idscan.net failed to adequately protect client information. The leaked records reportedly included personal data belonging to high-ranking officials.
Timeline
Late August 2026: The Nexus marketplace began advertising the stolen data.
September 7, 2026: Date of reporting.
The Tech Race
Comparing this breach to the 2017 Equifax data breach illustrates the growing risk to personal data held by third-party verification firms. The incident underscores a shift where identity security is increasingly jeopardized by the centralization of verification data.
Users whose IDs were used at rental counters face an increased risk of identity theft and financial fraud. Consumers should monitor their credit reports and watch for unauthorized activity on accounts linked to their travel or medical documentation.
The takeaway
Large-scale data breaches at third-party vendors often expose personal information long after the initial transaction. Always be cautious when presenting identification and regularly audit your digital footprint to minimize exposure.
Further reading
Learn more about the latest threats in Cybersecurity.
Source note: This article includes information reported by Computer Crime Research Center.
Live Poll
Do you trust that companies today are doing enough to protect your sensitive personal data?
