IDScan.net reports possible breach of driver’s license data and offers free identity protection

IDScan.net, a cloud-based identity-verification service used by businesses, disclosed that an unauthorized third party may have accessed and copied customer information stored in its cloud environment. The company learned of the potential breach around September 1, 2026, and has engaged federal law-enforcement agencies while the investigation continues.

The compromised data could include full names and driver’s license or other government-issued identification numbers. IDScan.net’s public notice states that, "While the investigation is ongoing, IDScan.net has determined that an unauthorized third party may have accessed and/or copied certain customer information stored within their accounts on the IDScan.net cloud."

Separate reporting linked the timing of the incident to a dark-web marketplace called Nexus that was advertised as selling more than 153 million U.S. and Canadian driver’s license scans. IDScan.net has not confirmed the marketplace as the source, and the connection remains an allegation under investigation.

To mitigate risk, the company is offering free credit monitoring and identity-protection services to potentially impacted individuals. It also advises customers to place fraud alerts or credit freezes with the three major credit bureaus and to watch for phishing attempts or suspicious account activity.

Experts note that exposure of government-issued ID numbers can enable account fraud, synthetic-identity creation and impersonation, as these credentials are persistent and cannot be replaced like passwords or credit-card numbers.