Summary
A dark-web marketplace called Nexus surfaced August 31, 2026 advertising scans of more than 153 million U.S. and Canadian driver's licenses along with millions of other identity documents. Investigative journalist Brian Krebs traced technical evidence pointing to IDScan.net, a Louisiana-based identity verification vendor, as the likely source. IDScan.net has not confirmed unauthorized access to its systems or the scope of any incident as of this writing — this remains an alleged breach, not a confirmed one, and the language throughout this bulletin reflects that.
Timeline
| Date | Event |
|---|---|
| Aug 31, 2026 | Nexus marketplace surfaces on cybercrime forum Exploit, claiming 153M+ driver's license scans |
| Sept 2, 2026 | Brian Krebs traces technical evidence toward IDScan.net; FBI New Orleans field office opens inquiry |
| Sept 5, 2026 | IDScan.net says it is investigating but has not confirmed the incident or its scope |
Domain Intelligence
idscan.net — 71.35
Score sits just above the 70-point trust threshold. Engine confidence on this domain is lower than usual, resting on a single unconfirmed adverse source and thin corroborating evidence — this score should be read as especially provisional given the unresolved allegation described above.
The Trust Observatory · thetrustobservatory.com · September 4, 2026