---
title: "Data breach at IDScan"
description: "IDScan, an identity-verification company based in New Orleans, USA, confirmed on September 4, 2026 that customer data stored on its cloud platform was accessed without authorization around September 1, 2026. The disclosure followed the discovery, in early September, of a dark-web service offering ac"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-04-idscan
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-04
dateModified: 2026-09-04
---
# IDScan

Data breach — Critical

IDScan, an identity-verification company based in New Orleans, USA, confirmed on September 4, 2026 that customer data stored on its cloud platform was accessed without authorization around September 1, 2026. The disclosure followed the discovery, in early September, of a dark-web service offering access to more than 153 million North American driver's license scans, which security researcher Brian Krebs traced back to IDScan. The exposed information can include the full names of verified individuals, their driver's license or other government ID numbers, and scans of those documents.

This information allows a third party to impersonate the affected individuals, for example to open accounts or bypass age or identity checks by presenting their name together with their driver's license number or a scan of the document itself.

| Fact | Value |
| --- | --- |
| Disclosed on | September 4, 2026 |
| Incident dated | September 1, 2026 |
| Accounts affected | 153M |
| Sector | Digital services |
| Country | United States |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Full name
- Customer ID
- Identity document

## What you can do

- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [IDScan confirms breach tied to 153 million stolen driver’s licenses](https://www.bleepingcomputer.com/news/security/idscan-confirms-breach-tied-to-153-million-stolen-drivers-licenses/) — Bleeping Computer
- [ID verification giant IDScan confirms data breach with more than 150 million driver's licenses stolen](https://techcrunch.com/2026/09/10/id-verification-giant-idscan-confirms-data-breach-with-more-than-150-million-drivers-licenses-stolen/) — TechCrunch
- [FBI Probes Service Selling 153M+ Drivers Licenses](https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/) — Krebs on Security
- [FBI investigates breach of 153 million driving license records at IDscan.net](https://www.csoonline.com/article/4218789/fbi-investigates-breach-of-153-million-driving-license-records-at-idscan-net.html) — CSO Online
- [Identity Verification Provider IDScan.net Discloses Data Breach](https://www.pymnts.com/cybersecurity/identity-theft/2026/identity-verification-provider-idscan-net-discloses-data-breach) — PYMNTS
- [IDScan.net Provides Notification of Data Security Incident](https://www.aol.com/articles/idscan-net-provides-notification-data-030000000.html) — IDScan.net (communiqué republié)

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-04-idscan
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees