153 Million Driver's Licenses Stolen and Sold on the Dark Web

The FBI is investigating a major breach at idscan.net, a service that stored digital copies of driver's licenses for verification purposes. Scammers have now posted 153 million of those license scans for sale on the dark web—the hidden part of the internet where illegal goods are traded. This is one of the largest identity document breaches on record.

What Happened

idscan.net allowed businesses to verify people's identities by scanning and storing driver's license images. The company's servers were compromised, and criminals gained access to millions of those scans. Those images are now being sold to other scammers, who can use them to commit identity theft, open fake accounts, or apply for credit in your name.

Why This Matters

A driver's license scan contains almost everything a scammer needs to impersonate you. Your name, address, date of birth, license number, and photograph are all there. Combined with other information—like a Social Security number or phone number—a scammer can apply for loans, credit cards, or even file a false tax return using your identity.

What to Do Now

You may not know if your license was in the breach, but you can take steps to protect yourself regardless.

Check your credit. Go to annualcreditreport.com and pull your free credit reports from all three bureaus: Equifax, Experian, and TransUnion. Look for accounts you didn't open. You can also place a credit freeze, which prevents anyone from opening new accounts in your name without your permission.

Watch for suspicious mail and emails. Scammers often send fake loan approvals, credit card statements, or tax documents to their victims. If you get mail about accounts you didn't create, contact the company immediately.

Monitor your accounts. Log into your bank, credit card, and investment accounts regularly and look for charges you didn't make. Most banks offer free fraud alerts.

Consider identity theft protection. Services like Experian IdentityWorks or fraud monitoring programs run by your bank can watch for suspicious activity on your behalf. Some are free after a breach like this.

This breach is serious, but it doesn't mean your identity will be stolen. Scammers buy stolen data in bulk—they're looking for quick wins, not targeting individuals. By staying alert and monitoring your accounts, you'll catch any fraud quickly and can stop it before it becomes a bigger problem.