Was Your Identification Document Exposed in the IDScan.net Data Breach?
Markovits, Stock & DeMarco, LLC is investigating potential claims on behalf of individuals whose driver’s license or other identification document information may have been compromised in a data breach involving IDScan.net.
IDScan.net is investigating a potential security incident that may have resulted in unauthorized access to identification document images processed through its identity verification systems.¹ If you rented a vehicle, visited a cannabis dispensary, or otherwise had your driver’s license or other identification document scanned or verified through IDScan.net’s systems, you may be entitled to compensation and other legal remedies.
What Happened?
IDScan.net is a Louisiana-based identity verification company that provides identity document scanning and authentication services to businesses in the rental car, hospitality, retail, gaming, and cannabis dispensary industries, among others. Publicly available reporting indicates that a dark web marketplace obtained a large volume of driver’s license and other identification document images that may be linked to IDScan.net’s systems.
Publicly available reporting indicates that IDScan.net notified at least some of its business customers of the incident beginning on or about September 1, 2026.² The total number of individuals affected nationwide is not yet known.
The operator of the marketplace, which advertised itself under the name “Nexus,” claimed to be offering more than 153 million driver’s license records for people in the United States and Canada, along with more than 10 million identification cards, more than 3 million travel documents or international identification records, and at least 579,000 medical cards.³ These figures reflect claims made by the operator of an illicit marketplace and have not been independently confirmed by IDScan.net or any government agency.
What Information Was Involved?
According to public reporting, the IDScan.net data breach may have involved the following types of information:
- Driver’s license images, including front and back scans
- State identification card images
- Passport and international travel document images
- Infrared and ultraviolet authentication scan images
- Medical and dispensary identification card images⁴
Because the incident may have involved sensitive identification document images, affected individuals may face an increased risk of identity theft, fraudulent account openings, and other misuse of their personal information.
Who Is Affected?
Individuals whose driver’s license, state identification card, passport, or other identification document was scanned or verified by a business using IDScan.net’s identity verification systems may have had sensitive personal information exposed. This may include individuals that have presented their ID to companies including car rental company Hertz, retailer Target, shipping company FedEx, Motorola Solutions, financial services company Jack Henry, and gaming and hospitality company Caesars Entertainment.⁵ IDScan.net has also stated that its technology is used by more than 1,000 cannabis dispensaries nationwide, including Planet 13 locations.
If your identification document was scanned at a Hertz location, Planet 13 dispensary, or another business using IDScan.net technology, we would like to speak with you about when and where your identification was scanned and whether your information may have been affected.
Contact Us About Your Legal Rights
If you would like a free, confidential consultation with an attorney to learn more about your rights and potential legal remedies related to the IDScan.net data breach, please contact Markovits, Stock & DeMarco, LLC attorney Justin C. Walker. You can reach us through any of the following:
- Call us at (513) 651-3700
- Email us at [email protected]
- Submit a Case Evaluation request through the form on our website
¹https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
²Id.
³Id.
⁴Id.
⁵Id.