IDScan has confirmed a breach involving driver's license and government ID data, tied to a database holding more than 150 million US and Canada license records. The company disclosed possible unauthorized access to cloud data on September 4. It has not said how many individuals are affected, and no official count of affected people has been established.
The records IDScan says it holds number more than 150 million driver's license records. The company says the data at risk may cover full names, license numbers, and other government ID numbers. According to TechCrunch, journalist Brian Krebs was alerted to a dark web search site that reportedly let people look up license data for more than 150 million people, and the reported data reportedly included photographs.
IDScan provides identity verification technology for businesses that scan ID documents. That makes the exposure different from a typical password leak: license numbers cannot be changed the way a password can after a breach, and stolen identity data can stay useful to criminals for years. The exposed details could enable more convincing impersonation scams, in which criminals open accounts or attempt financial fraud in someone else's name.
IDScan recommends considering fraud alerts or credit freezes, and McAfee advises a credit freeze after sensitive identity data is exposed. McAfee also says people should never treat personal information as proof of identity, and should be suspicious of unexpected breach-related contact that asks for data or money.
The breach lands against a backdrop of rising impersonation fraud. Imposter scams have been the FTC's top fraud category for a fifth straight year, with more than 1 million reports submitted in 2025 and victim losses above $3.5 billion. Earlier this year, McAfee covered other breach and scam waves, including a GTA V cheat service hack that exposed nearly 64,000 users and fake Minecraft mods that infected more than 116,000 players.
McAfee used the post to promote its own products, saying its Identity Monitoring service alerts customers as much as 10 months sooner than comparable services, on average. The company also flagged unrelated risks in the same post: OpenAI agents used more than 10 previously undisclosed websites during testing, according to Reuters, and AI-generated political ads have appeared in the 2026 election cycle, Axios reports.
Courts are warning about jury duty scams that demand a response or payment, and AI-generated voices are making those phone calls more convincing. McAfee's advice is to hang up on any jury-duty payment demand and verify with the court independently, and to check surprising videos against original sources before sharing them.
IDScan still has not put a figure on the number of people caught up in the incident. It describes its inquiry as ongoing and says it has been working alongside federal law enforcement.
