FBI Probes IDScan Breach Exposing 153 Million Driver's Licenses

The Federal Bureau of Investigation's New Orleans field office is investigating a massive data breach involving IDScan, a Louisiana-based identity verification provider. The leak exposed more than 153 million scans of U.S. and Canadian driver's licenses, 10 million identification cards, 3 million travel documents, and 579,000 medical cards.

Security researchers Brian Krebs and Zach Edwards discovered the stolen data being sold on a Russian cybercrime forum by a user known as Nexus. The Nexus website featured a searchable database that appeared to update in real time, suggesting an ongoing breach. Among the exposed records was the driver's license of U.S. Defense Secretary Pete Hegseth. Krebs' investigation further suggested that some data may have been collected via the car rental company Hertz.

IDScan has engaged a third-party forensic investigation to secure its systems and has notified its partner companies. While the Nexus website vanished shortly after the breach became public, the FBI continues its inquiry. Zach Edwards noted that the scale of the breach is unprecedented and creates significant national security risks for high-profile individuals.