Key facts
- IDScan confirmed a data breach involving the theft of driver's licenses from its systems.
- Hackers stole full names, driver's license numbers, and identity numbers from other government-issued documents, such as passports.
ID verification service IDScan has confirmed a data breach that resulted in the theft of over 150 million driver's licenses and other government-issued identification documents. The breach, which occurred over a year-long hack, exposed full names, driver's license numbers, and passport information.

The breach of IDScan, a company used by various businesses to verify customer identities, exposes millions of individuals to potential identity theft and fraud. The compromised data, including driver's licenses and passport information, is highly sensitive and can be used for malicious purposes.
ID verification service IDScan has confirmed a data breach involving the theft of driver's licenses and other government-issued identification documents from its systems. The company acknowledged the incident in a website notice on September 10, 2026, a week after cybersecurity journalist Brian Krebs first reported the breach. Krebs discovered a website on the dark web that allowed searches of over 150 million driver's licenses, including photos, from individuals in the United States and Canada. The stolen data also included identity numbers from passports and other government-issued documents. IDScan stated that while full access to the information required payment from the hackers, it was providing notice to potentially affected individuals. The Pentagon has stated it is aware of the suspected breach, and the FBI confirmed it is investigating the incident. IDScan's investigation is ongoing.