FBI Investigates Dark‑Web Marketplace Selling Over 150 Million North American Driver’s Licenses

The Federal Bureau of Investigation has launched a probe into a suspected data breach at IDScan.net after a newly surfaced dark‑web service, dubbed Nexus, began advertising searchable access to more than 153 million scanned U.S. and Canadian driver’s licenses.

First observed on September 1, 2026, Nexus presented itself as an identity‑theft marketplace, allowing buyers to query the database by name, license number, or other personal identifiers. The service’s listings claimed to include full‑color scans of driver’s licenses, complete with photographs and barcodes, effectively handing over a trove of personally identifiable information to anyone willing to pay.

IDScan.net, a company that provides verification and scanning solutions for businesses ranging from car‑rental agencies to financial institutions, confirmed that it is cooperating with federal authorities. While the firm has not disclosed the exact scope of the breach, the scale of the alleged leak suggests that a substantial portion of its client base could be affected, potentially exposing millions of individuals to fraud and identity‑theft risks.

Law enforcement officials noted that the appearance of Nexus aligns with a broader pattern of cybercriminals exploiting large‑scale data repositories on the dark web. Similar marketplaces have previously surfaced selling compromised credit‑card numbers, health records, and biometric data. The availability of driver’s license scans is particularly concerning because such documents are often used to verify identity in a variety of offline and online transactions, from opening bank accounts to renting vehicles.

Cyber‑security experts warn that the compromised license data could be leveraged for sophisticated fraud schemes, including synthetic‑identity creation and account takeover attacks. “When you have a high‑resolution image of a government‑issued ID, it becomes much easier for criminals to fabricate convincing documents,” said a spokesperson for a leading identity‑theft mitigation firm, who asked to remain anonymous.

The FBI’s investigation aims to determine how the data was exfiltrated, identify the actors behind Nexus, and assess the full impact on affected consumers. IDScan.net has urged customers to monitor their accounts for suspicious activity and consider additional verification steps. As the probe unfolds, authorities may also issue broader guidance on protecting personal identification documents in the digital age, underscoring the growing challenge of safeguarding sensitive data against organized cyber‑crime networks.