Massive Identity Breach at IDScan Exposes 153 Million Driver's Licenses
A critical data breach at identity verification provider IDScan has resulted in the exfiltration of 153 million U.S. and Canadian driver's licenses. The dataset, distributed via the "Nexus" dark web cache, includes structured PII—specifically full names, addresses, and dates of birth—alongside high-resolution digital scans of physical licenses. This exposure facilitates large-scale synthetic identity fraud and account takeover (ATO) by enabling the bypass of automated Know Your Customer (KYC) protocols. The inclusion of high-ranking government officials, including the U.S. Secretary of Defense, has elevated the incident to a national security concern, triggering an active FBI investigation into the Nexus service and the origin of the exfiltration.