FBI Probes IDScan Nexus Leak: 153 Million US Driver’s Licenses Exposed

The Federal Bureau of Investigation is probing a massive data breach that exposed 153 million US and Canadian driver's licenses. This leak also contains 10 million ID cards, 1.9 million travel documents, and 1.3 million international driver's licenses. The breach affects millions of citizens and raises serious questions about the security of identity verification services. Readers should understand that their personal identity documents may be compromised if they use affected rental or retail services.

FBI probes massive IDScan data breach exposing 153 million driver's licenses

The stolen data appeared on the Russian cybercrime forum Exploit under the name Nexus. Investigators suspect the information originated from IDScan, an ID-authentication service provider. This company provides verification services for major retailers like Hertz and Planet13. Timestamps on the leaked documents align with ID verification events at these specific locations.

Beyond driver's licenses, the leak contains 579,000 medical cards and 429,000 common access cards. It also includes 91,000 residence cards and 77,000 employment authorization records. The dataset contains 5 million other documents that have not been fully categorized. The sheer volume of these records suggests a comprehensive breach of a central authentication database.

US Secretary of Defense Pete Hegseth's data was found within the leaked files. Jillian Kossman, a marketing and operations leader at idscan.net, confirmed the company is cooperating with the investigation. She stated, "At this point I’m not able to share any additional information, but the updates you have provided have been welcome, and helpful to our team’s investigation." This admission confirms IDScan's awareness of the breach and its ongoing response efforts.

The FBI investigation focuses on determining the full scope of the data exposure. IDScan continues to assist authorities in tracking the source of the leak. Consumers should monitor their identity status closely given the high number of affected documents. The incident highlights the risks associated with centralized identity verification systems.