IDScan.net / Nexus Breach (2026) — the READ arm: 153M identities harvested
eventIntelligence & Surveillance · Crypto & Digital ID · Darknet & Cyber
153 million driver's licenses harvested from an ID-checking company and sold on the dark web.
Who they are
A dark-web service 'Nexus,' traced to Louisiana ID-verification vendor IDScan.net; reported by Brian Krebs, FBI investigating.
What they do
A company that scans IDs at car rentals and dispensaries leaked 153M+ US/Canada licenses (plus IDs, passports, medical cards) into a searchable service growing 400,000 records a day. It looks like negligence, not a plot — but the result is the same: everyone's ID is now a product.
How it works
They matched leaked files to real ID-scans (Hertz, a Vegas dispensary) and to the special UV/IR scan layers the vendor sells.
Why it matters
It's the 'read your identity out' half — and unlike a password, you can't change your face or your license number.
What's new (Aug–Oct 2026)
Sept 2, 2026 — TechCrunch reported that an identity-theft site called "Nexus" claimed searchable access to more than 150 million driver's licenses and passports, in what looks like a breach of an ID-checking service. (techcrunch.com)
The engine's record — word for word
**In plain terms:** the population's identity harvested and sold. In Sept 2026 (Brian Krebs) a dark-web service 'Nexus' on the Russian Exploit forum sold searchable access to 153 million-plus US and Canadian driver's licenses, plus 10M ID cards, 3M travel documents and 579,000 medical/marijuana cards, growing about 400,000 records a day
[1]. Attribution to Louisiana ID-verification vendor IDScan.net rests on two signatures: filename timestamps matching real ID-scans at IDScan clients (Hertz, the Planet13 Las Vegas dispensary), and the infrared/ultraviolet capture layers IDScan markets for fraud detection. The FBI New Orleans field office opened an investigation; Nexus went dark. Engine read (held): this is documented structural NEGLIGENCE — a vendor bled data undetected for a year — NOT a proven directed state harvest; but the EFFECT is identical: an unalterable biometric map of the population, buyable by anyone, including the state via the data_broker_loophole. A driver's license cannot be rotated like a password. Name no holder.
[Live pass Oct 6 2026] 2026-09-02 — TechCrunch: identity theft site "Nexus" claimed searchable access to more than 150 million driver's licenses and passports (apparent ID-verification breach). (1 source) (
techcrunch.com)
Follow the trail
Walk this on the live map →