IDScan.net Data Breach Investigation

Pittman, Dutton, Hellums, Bradley & Mann, P.C. is investigating a reported data breach involving IDScan.net after news reports revealed that a dark web marketplace claimed to be selling access to more than 153 million driver’s license records from the United States and Canada.
‍

The incident has raised serious concerns for consumers whose driver’s licenses or other identity documents may have been scanned through ID verification technology. According to Reuters, the FBI is investigating reports that tens of millions of U.S. and Canadian driver’s licenses were being sold on the dark web.

IDScan.net is a New Orleans-based identity verification company that provides ID scanning and fraud prevention technology. The company states that its products are used for more than 21 million verifications each month at more than 20,000 locations worldwide.

Individuals who believe their driver’s license or personal information may have been exposed may have legal rights and could be entitled to compensation.

‍

What Happened?

Cybersecurity journalist Brian Krebs reported that a dark web service known as Nexus was offering access to digital scans of more than 153 million driver’s licenses from people in the United States and Canada. The service also reportedly claimed to have other identity documents, including ID cards, travel documents, medical cards, residence cards, and employment authorization records.

According to Reuters, the FBI stated that it is looking into the incident. Reuters also reported that the source of the stolen data had not been independently confirmed, although IDScan.net has been named in reporting connected to the investigation.

Public reporting states that multiple class action lawsuits have already been filed in the U.S. District Court for the Eastern District of Louisiana against IDScan.net. Those lawsuits reportedly involve consumers who believe their driver’s license information may have been compromised after using businesses that relied on IDScan.net’s technology.

At this time, the full scope of the incident has not been confirmed. However, if the reports are accurate, this could be one of the largest known exposures of driver’s license information in North America.

‍

What Information May Have Been Exposed?

The exact information involved may vary by person. Based on public reporting, the information allegedly available through the dark web service may have included digital scans or images of driver’s licenses and other identity documents.

Driver’s license records can contain highly sensitive information, including:

• Full names
• Home addresses
• Dates of birth
• Driver’s license numbers
• Photographs
• Signatures
• Physical descriptors
• State-issued identification details
• Other information printed on identity documents

Some reports also indicate that the dark web service claimed to contain other types of identification and medical-related documents.

This type of information can be especially valuable to criminals because driver’s license images are often used to verify identity, open accounts, rent vehicles, pass identity checks, or support fraudulent applications.

‍

Why This Breach Matters

A driver’s license is more than just a card. It is one of the primary documents people use to prove who they are.

If a digital copy of a driver’s license is exposed, criminals may use it to attempt identity theft, account takeover, synthetic identity fraud, financial fraud, or phishing scams. A stolen license image may also be combined with other leaked information, such as Social Security numbers, phone numbers, email addresses, or financial records, to create more convincing fraud attempts.

This incident is also concerning because many consumers may not know when or where their license was scanned. People may have provided their ID while renting a car, entering a business, verifying age, picking up a package, completing a transaction, or using a service that required identity verification.

That means affected individuals may not immediately recognize IDScan.net, even if their information passed through the company’s technology.

‍

What Should Affected Individuals Do?

If you believe your driver’s license or identity documents may have been involved in the reported IDScan.net breach, you should take the situation seriously.

You may want to monitor your credit reports, review financial accounts, watch for unfamiliar loans or credit applications, and be cautious of emails, calls, or text messages asking you to verify personal information.

Affected individuals may also consider placing a fraud alert or credit freeze with the major credit reporting agencies. A credit freeze can help prevent new credit accounts from being opened in your name without your permission.

You should also save any notices, emails, screenshots, receipts, or records showing that your identification was scanned by a business using ID verification technology. Those records may be important if your information was compromised.

‍

Contact Our Data Breach Attorneys

Companies that collect, scan, process, or store driver’s license information have a responsibility to protect it. When sensitive identity documents are exposed, affected individuals may face long-term risks involving fraud, identity theft, and loss of privacy.

Pittman, Dutton, Hellums, Bradley & Mann, P.C. is investigating the reported IDScan.net data breach and evaluating potential claims on behalf of individuals whose driver’s license information or other personal information may have been exposed.

If you believe your information may have been involved in the reported IDScan.net data breach, call (205) 322-8880 today for a free consultation.

There are no upfront costs, and you pay nothing unless we recover compensation on your behalf.

‍