2026 IDScan.net — confirms cloud access; Nexus 153M+ DL sale; FBI probe; OPC Canada investigation

Company-confirmed incident with ongoing forensics — IDScan.net notice dated September 4, 2026. On or around September 1, 2026 the company received information of possible unauthorized access, secured systems, engaged third-party specialists, and is cooperating with federal law enforcement. IDScan determined an unauthorized third party may have accessed and/or copied certain customer information in cloud accounts (names and DL/government ID numbers). Separately, KrebsOnSecurity/FBI coverage of the Nexus Exploit-forum identity-theft service advertising 153M+ driver’s-license scans remains the scale cited in trade press; company has not published a matching national census in the Sep 4 notice. recordsAffected remains 153000000 from actor/press census pending completed investigation; companyConfirmed true for unauthorized-access determination. Update September 2026: multiple lawsuits and class-action investigations were filed/opened against IDScan after the Nexus 153M+ driver’s-license sale reporting (BleepingComputer Sep 4; ClassAction.org and firm investigations). Eligibility messaging targets people who received IDScan.net breach notices — same incident, not a separate breach row. Update September 10, 2026: BleepingComputer and TechCrunch amplified IDScan’s September 4 notice confirming unauthorized cloud access potentially including names and DL/government ID numbers, linked in press to the Nexus 153M+ license-scan corpus. Update September 21–22, 2026: Privacy Commissioner of Canada opened a PIPEDA investigation into IDScan.net safeguards and breach notifications; RCMP stated it is aware of the FBI probe and monitoring while engaged with partners. Company census still unpublished beyond actor/Krebs Nexus scale claims.