CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

FBI Probes Service Selling 153M+ Drivers Licenses

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 5517

As cited

Copy frozen at (site build).

breaches incidents

FBI Probes Service Selling 153M+ Drivers Licenses

A dark web identity theft service called Nexus launched on August 31, 2026, offering digital scans of over 153 million US and Canadian drivers licenses, along with millions of other identity documents. Forensic analysis of timestamps and user confirmations suggests the data originated from a breach at IDScan, a Louisiana-based identity verification company whose clients include Hertz rental car agencies, marijuana dispensaries, and major retailers. The FBI's New Orleans field office opened an official investigation after learning of the exposure, and the Nexus service went offline within hours of the story's publication.

Why it matters: Anyone whose driver's license was scanned by IDScan at Hertz, dispensaries, hotels, or other client locations faces immediate identity theft and credit fraud risk; enterprises using IDScan for identity verification must assess the breach scope and notify affected customers and regulators; security teams should monitor for credential misuse and watch for downstream sales of the exposed biometric scans.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary