IDScan Confirms Breach Tied to 153 Million Stolen Driver's License Records — Earlier Claim Now Verified

Summary

IDScan.net has confirmed the data breach that The Trust Observatory covered as an unconfirmed claim in TTO-2026-0905-099, published September 5, 2026. The company acknowledged that a breach occurred involving records including driver's license scans. The Nexus marketplace claim of 153 million affected records, which the earlier bulletin treated as credible but unconfirmed, has now been validated by the company itself. This bulletin updates TTO-2026-0905-099 and corrects its evidentiary status from unconfirmed to confirmed.

Timeline

What Changed

TTO-2026-0905-099 stated: IDScan.net has not confirmed a breach, unauthorized access, or data theft. That characterization is no longer accurate. IDScan.net has now confirmed the breach. The earlier bulletin's framing was correct at the time of publication and consistent with TTO's evidentiary standard — it treated the Nexus claim as credible but did not assert confirmation the evidence did not yet support. The confirmation now available changes the evidentiary status of the incident but does not change the underlying facts as reported.

The scale of 153 million driver's license records, if confirmed at that figure, would represent one of the largest identity document exposures on record. As of this bulletin, IDScan.net has confirmed the breach occurred but has not independently published a count matching or disputing the Nexus figure. The 153 million figure remains the only publicly available estimate of scale and should be treated as unverified at the precise count, while the fact of the breach itself is now confirmed.

Domain Intelligence

idscan.net — 71.35

Score unchanged from TTO-2026-0905-099. The confirmed breach does not retroactively change the domain intelligence score, which reflects accumulated infrastructure and network signals assessed prior to and independently of this incident.