IDScan confirms breach after hackers offer 153 million driver’s license scans for sale

Identity verification company IDScan.net has announced a data security incident on its website, disclosing that unauthorized access to customer information may have occurred around September 1. The company took immediate action to secure its systems and engaged third-party experts to investigate the extent and implications of the breach.

According to the notification, personal data such as full names, driver's licenses, and other government-issued IDs were potentially accessed and copied from customers' accounts stored in the company's cloud.

IDScan.net has since initiated an investigation and reviewed its data security policies and procedures. The company is cooperating with federal law enforcement in their ongoing investigation. Reports indicate that the FBI is examining a possible data breach that could have exposed millions of American driver's licenses, with a stolen list of over 160 million North American IDs discovered on a Russian-language cybercrime forum.

The source of the stolen data remains unclear. Independent journalist Brian Krebs confirmed the authenticity of some documents, sharing them with nine individuals whose licenses appeared in the list.

The incident has raised concerns about the security of identity verification systems and the potential impact on the financial sector. PYMNTS reported that the potential data theft could serve as a stress test for the broader identity verification economy, as criminals may use legitimate identification documents to create more convincing fraudulent applications.

The financial system must now balance detecting fake documents while verifying the entitlement of legitimate users presenting genuine identity proof. According to PYMNTS' recent report, 68% of financial institutions have increased their fraud-detection spending in 2025 to combat these evolving threats.