Hackers Ran a Live Feed of Every ID Scanned by IDScan.net for Over a Year, Exposing 153M Licenses
Techdirt / KrebsOnSecurity / Hacker News·high signal
Brian Krebs revealed in early September 2026 that attackers had continuously exfiltrated scans from Louisiana-based IDScan.net for more than a year, accumulating over 153 million US and Canadian drivers licenses. In the hackers' own words they had been 'continuously exfiltrating new data for over a year into our private database,' and roughly 400,000 additional records landed in the leaked database within 24 hours of the disclosure. The company appears to have been unaware throughout, despite holding security certifications and running a Trust Center page about its data protection.