www.tuckerellis.com Large Data Breach Exposes 153 Million Driver's Licenses
Article Content
- •Over 153 million driver's licenses potentially leaked in a major data breach.
- •IDScan.net faces 19 class-action lawsuits for negligence in data protection.
- •The FBI has opened an investigation into the breach linked to the dark-web service Nexus.
A data breach at IDScan.net has potentially leaked over 153 million driver's licenses from the U.S. and Canada to the dark web. The breach, which occurred between April and September 2026, is linked to a dark-web service called Nexus, which is selling these scans. The FBI has launched an investigation into the incident, which has resulted in 19 class-action lawsuits against IDScan.net for negligence in safeguarding personal identifiable information. The leaked data includes sensitive information such as names, birth dates, and government-issued ID numbers. IDScan.net has acknowledged the breach and is offering free credit monitoring to affected individuals while implementing security enhancements. The lawsuits claim that IDScan failed to use reasonable security practices, such as encryption and data deletion protocols. The situation poses significant risks for identity theft and fraud for those affected.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Common questions
Who is affected by the breach?
What actions is IDScan.net taking?
What are the legal implications for IDScan.net?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…