IDScan.net Data Breach Investigation
IDScan is a New Orleans-based identity verification company that provides identity verification, age verification, ID scanning, and fraud prevention technology to businesses and organizations.
What Happened at IDScan.net?
On or around September 1, 2026, IDScan learned that certain data may have been accessed without authorization. IDScan subsequently determined that an unauthorized third party may have accessed and/or copied certain customer information stored within customer accounts on the IDScan.net cloud.
IDScan states that it took steps to secure its systems, retained third-party specialists to investigate the nature and scope of the incident, and is cooperating with federal law enforcement.
The incident has also been linked in public reporting to a dark web identity-theft service known as “Nexus,” which claimed to possess more than 153 million driver’s license records belonging to individuals in the United States and Canada. Nexus has also claimed to possess more than 10 million identification card records, more than 3 million travel documents or international identification records, and hundreds of thousands of medical card records.
The full scope of the incident and the total number of individuals affected have not yet been publicly confirmed.
What Information Was Compromised?
IDScan has stated that the information potentially affected by the incident may include:
- Full names;
- Driver’s license numbers; and
- Other government-issued identification numbers.
Public reporting concerning the data allegedly obtained from IDScan indicates that the incident may also involve images or scans of driver’s licenses and other identification documents, potentially including information displayed or encoded on those documents.
The investigation remains ongoing, and IDScan has not yet publicly identified all categories of personal information affected or the total number of individuals impacted.
Why Is This Important?
Driver’s licenses and other government-issued identification documents contain sensitive personal information that can potentially be used to facilitate identity theft, fraudulent financial accounts, impersonation, phishing schemes, account takeover, and other forms of identity-related fraud.
Unlike passwords, government-issued identification numbers and other information contained on identification documents may be difficult to change after they have been exposed. Images of identification documents may also provide criminals with information that can potentially be used to impersonate individuals or circumvent identity-verification procedures.
What Should You Do?
If you received a notice stating that your personal information was affected by the IDScan.net cybersecurity incident, or believe that your driver’s license, state identification card, passport, or other government-issued identification information may have been compromised, please contact our data breach attorneys by completing the form below to learn more about your potential legal rights and our ongoing investigation.
This is a questionnaire created by the law firm of Chimicles Schwartz Kriner & Donaldson-Smith LLP (CSK&D) to investigate potential claims related to this data breach. Your answers will be screened, and you may be contacted if your responses match certain criteria.
When you submit this form, it will not automatically collect your details like name and email address unless you provide it yourself.
(*) Indicates required field: When communicating with us through this site or otherwise in connection with a matter for which we do not already represent you, your communication may not be treated as privileged or confidential, and does not create an attorney-client relationship between you and our Firm.
