153 Million Driver License Images Offered on Dark Web
153 million US and Canadian driver's licenses offered on dark web, likely from IDScan.net.
Run IDScan.net?
Get an email when a reviewed story names IDScan.net, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
A threat actor is offering digital scans of over 153 million US and Canadian driver's licenses on the dark web, allegedly stolen from identity verification firm IDScan.net. The stolen data, which also includes other identification and medical cards, was found on a service called Nexus. The FBI has reportedly launched an investigation into the potential breach.
The lesson from this incident
Full lessonA threat actor allegedly exfiltrated over 153 million driver license and identity card scans from IDScan.net, an identity verification service provider, and listed them for sale on the dark web. This incident highlights the extreme concentration risk inherent in third-party identity verification platforms, which aggregate highly sensitive PII at massive scale, making them high-value targets. When a single vendor holds biometric and government-issued identity data for millions of individuals, a single breach can have cascading, irreversible consequences — unlike passwords, driver license images cannot be 'reset.' Organizations that rely on third-party identity verification services must rigorously vet those vendors' security postures, as their data exposure becomes your liability and your customers' harm.
What helps against this
How we list vendors- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
Indicators of Compromise
- domain — idscan.net