Dark-web seller offers database of 153 million driver’s license records

A database containing 153 million driver’s license records is reportedly being offered for sale on the dark web, raising the risk of identity theft and fraud for a huge number of people. The post cites Brian Krebs as the source of further details, but the available text does not identify the breached organization, the intrusion method, or the precise fields exposed beyond driver’s license data.
Why it matters: Driver’s license data is highly sensitive and can be used for identity theft, account fraud, and impersonation. Affected agencies and users need confirmation of the source quickly so people can watch for fraud and replace credentials or documents if needed.

Sources

Canadian regulator opens probe of IDScan for allegedly violating data privacy laws
2026.09.22 95% relevant
This article ties the previously reported 153 million driver’s license records directly to IDScan.net, confirms the company disclosed a cloud-platform breach around September 4 after learning of it on or about September 1, and adds that Canada’s privacy regulator has opened an investigation into IDScan’s security controls and notification practices.
IDScan confirms breach after hackers offer 153 million driver’s license scans for sale
2026.09.10 95% relevant
This article appears to update the same underlying event by identifying IDScan as the source of the 153 million driver’s license records previously reported for sale and adding breach confirmation from the company.
IDScan confirms breach tied to 153 million stolen driver’s licenses
Lawrence Abrams 2026.09.10 98% relevant
This article directly advances the same event by naming IDScan as the breached source, confirming unauthorized access to data stored in IDScan.net cloud accounts, and adding that the company disclosed the incident, is notifying affected people, and is cooperating with the FBI.
Driver’s License Data for Sale
Bruce Schneier 2026.09.09 100% relevant
This article establishes a distinct breach-and-fraud story centered on a newly surfaced dark-web sale of a massive driver’s license dataset, with no clearly matching tracked event in the existing list.
← Back to all stories