IDScan.net Faces Four Class-Action Lawsuits Over Massive Driver's License Data Leak

Four class-action lawsuits were lodged Wednesday in the U.S. District Court for the Eastern District of Louisiana against New Orleans-based IDScan.net, a provider of identity-verification services to companies such as Hertz, GameStop and FedEx. The suits claim the firm’s systems were compromised, leading to the appearance of a dark-web site called Nexus that advertised access to over 153 million driver’s licenses from the United States and Canada.

IDScan.net processes more than 21 million verifications each month to help clients detect counterfeit documents. Cybersecurity reporter Brian Krebs reported that the company appears to be linked to the Nexus site, which has since been taken down but could reappear under a different name.

The plaintiffs, residents of California, Florida, Georgia and Louisiana, allege they used IDScan’s services through rentals with Hertz and its Thrifty brand and fear their personal data was stolen. > "On September 18, 2025, Plaintiff rented a car through Hertz in this District. Hertz is a client of IDScan," one filing states.

The complaints also assert that IDScan likely violated Federal Trade Commission rules on safeguarding sensitive information and seek damages as well as a court order requiring the company to implement stronger security safeguards. IDScan has not responded to requests for comment. The FBI confirmed it is investigating the incident but declined further comment as the case proceeds.