Breachesby GlyphIDScan.net
Disclosed Sep 1, 202613,000,000 affectedConfirmed
IDScan confirms cloud breach tied to 153 million stolen driver's license scans
ID verification company IDScan confirmed an unauthorized party may have accessed or copied data in IDScan.net cloud accounts after a dark web service advertised more than 153 million driver's license scans plus ID cards, travel documents and medical cards. The FBI is investigating and multiple lawsuits were filed.
What is known
| People affected | 13,000,000 (as reported by the organization) |
|---|---|
| Disclosed | Sep 1, 2026 |
| Discovered | Sep 1, 2026 |
| Happened | Apr 1, 2026 |
| Attack | Hacking |
| Data exposed | NamesGovernment IDsBiometricsHealthDates of birth |
| Sector | Data brokers · US |
| Status | Confirmed |
| Lawsuit or fine | Multiple class actions filed (2026) |
Sources
IDScan notification of data security incidentID verification giant IDScan confirms data breachIDScan confirms breach tied to 153 million stolen driver's licensesTexas Attorney General data security breach report BR-0005350: IDScan.netNotice letter filed with the Delaware DOJ: IDScan.netOregon DOJ breach notice: IDScan.net
Notices filed
History of this record
empty to https://justice.oregon.gov/consumer/DataBreach/by dailySource
empty to https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2026/09/IDScan_Sub-Notice-Final.pdfby dailySource
["names","government-id","biometrics","health"] to ["names","government-id","biometrics","health","dob"]by backfillSource
empty to organizationby backfillSource
empty to 13000000by backfillSource
empty to 2026-04-01by backfillSource
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.