FBI Probes IDScan After 153 Million Driver's Licenses Allegedly Leaked

Louisiana-based identity verification firm IDScan.net is facing an FBI inquiry and a wave of lawsuits following reports that millions of government-issued IDs were offered for sale on the dark web. The breach represents a critical failure in identity security, potentially exposing the private data of millions of citizens across North America.

The leak surfaced via a dark web marketplace known as "Nexus," which allegedly offered scans of approximately 153 million driver's licenses from the United States and Canada. The dataset extended beyond licenses to include 10 million ID cards, 3 million international travel cards, and 579,000 medical cards. These records were particularly damaging because they included high-resolution images, including specialized infrared and ultraviolet scans used to verify authenticity. Among the compromised records was the driver's license of US Defense Secretary Pete Hegseth. The Nexus service was shut down shortly after the breach was reported.

The Role of IDScan.net

IDScan.net provides the hardware and software infrastructure that businesses rely on to prevent fraud. Its technology is utilized by major corporations such as FedEx and Hertz, as well as marijuana dispensaries, to authenticate government IDs in real-time. The company operates on a massive scale, performing over 21 million verifications every month across 20,000 locations globally. By using IR and UV light to spot forged documents, IDScan positioned itself as a gold standard for security; however, the alleged leak of these very scans turns a security tool into a blueprint for fraud.

Implications for Identity Security

This breach is viewed as catastrophic by security experts because it provides cybercriminals with high-fidelity digital copies of official documents. Unlike simple text-based leaks of Social Security numbers, these high-resolution images—complete with security feature scans—allow bad actors to create near-perfect physical and digital forgeries. This enables sophisticated identity theft that can bypass traditional verification checks, placing general citizens, law enforcement officers, and high-ranking government officials at severe risk of targeted fraud.

Ongoing Investigations

Federal authorities are now working to determine how the data was exfiltrated and whether IDScan.net's internal security protocols were breached. The FBI's New Orleans field office has launched an official inquiry into the source of the images. As the company faces mounting legal pressure from multiple lawsuits, the industry is watching to see if this event triggers a broader shift in how identity verification data is stored and encrypted by third-party vendors.