2026 IDScan.net — Nexus / Exploit “databroker1” sale of 153M+ DL scans (unverified; FBI probe)

Unverified Exploit-forum / extortion-adjacent identity sale — August 31–September 1, 2026. A new Exploit user (sales thread attributed to account databroker1) advertised the Nexus service claiming access to digital identity documents on 160M+/170M+ North Americans, including more than 153 million U.S. and Canadian driver’s-license scans, over 10 million ID cards, more than three million travel/international documents, and at least 579,000 medical cards (KrebsOnSecurity). The seller claimed continuous exfiltration for over a year; the license count reportedly grew by ~400,000 in 24 hours. Krebs attributed the corpus to New Orleans identity-verification vendor IDScan.net based on timestamp matches to Hertz rentals and Planet13 dispensary scans plus IR/UV image pairs consistent with IDScan’s pipeline; IDScan’s trust materials name clients including Hertz, Target, FedEx, Motorola Solutions, and Jack Henry (Caesars later said it was not a current client). IDScan spokesperson Jillian Kossman said the company was investigating but did not confirm a breach. The FBI New Orleans field office told Krebs it opened an official inquiry; Nexus later displayed “This service is no longer available.” recordsAffected 153000000 from actor/Krebs-reported driver’s-license count and remains labeled unverified; companyConfirmed false until IDScan or regulators attest scope.