IDScan confirms breach of more than 150 million driver’s licences

IDScan, a Louisiana-based identity verification provider, has confirmed that hackers stole driver’s licence records from its cloud systems. The company said the stolen data includes full names, driver’s licence numbers and identity numbers from other government-issued documents such as passports.

The disclosure follows reporting by cybersecurity journalist Brian Krebs, who found a dark web site allowing searches of licence information for more than 150 million people in the United States and Canada, including photographs. Krebs verified the data against his own record, and the cache reportedly included US Defence Secretary Pete Hegseth.

IDScan said it was told of the breach claim on or around 1 September, the same day Krebs first reported it. The Pentagon and the FBI have both said they are investigating. IDScan, whose identity checks are used by customers from entertainment venues to cannabis dispensaries, has not said how many individuals are affected.