IDScan.net driver's license incident: what is confirmed and what you should do

On or around September 1, 2026, IDScan.net said it received information that some data may have been accessed without permission. The company makes tools that businesses use to scan driver’s licenses and other IDs at ordinary counters — rental desks, door checks, and similar spots. In its own statement, it said it moved to secure its systems, brought in outside experts, and is working with law enforcement. It also said an unauthorized party may have accessed or copied certain information stored in customer accounts: full names, and driver’s license or other government-issued identification numbers.

The FBI’s New Orleans office has separately confirmed it is looking into “the incident,” with no further comment. IDScan.net says it is notifying people who may be affected and offering free credit monitoring and identity protection. It has not confirmed a widely repeated figure of 153 million scans, and it has not said that photos, addresses, dates of birth, or images of the cards themselves were taken.

The part that actually changes things for you

Most coverage of this story is either very loud or oddly soothing. The loud version treats “153 million driver’s licenses for sale” as a settled fact. The soothing version treats the company’s narrower statement as a reason to relax — as if “only names and license numbers” were leftover scraps. Neither version is written for the person who once handed a license to a clerk and went on with their day.

You did not open an account with IDScan.net. Its customers are the businesses that scanned you. When someone checked your ID, a record of that check could sit in that business’s account on IDScan.net’s systems — a copy you were never shown and never asked to store. The company now says those accounts may have been reached, and that what may have been taken includes your name and the number on your license or other government ID.

That pairing is the part that lasts. A bank card can be cancelled by morning. A driver’s license number is a long-lived government identifier. Next to your full name, it is the kind of information used to open accounts, file a tax return, or impersonate you. Whether the rumored full-color scans are real is a different question, and the company has not confirmed them. Those images would matter most to someone trying to forge a physical card. The name-and-number claim is already enough for remote fraud. A company does not notify people and offer monitoring as a hobby.

You also cannot look yourself up in this incident. There is no public list, and no internet search can honestly tell you that your license was or was not involved. Some well-known companies named in coverage have said they were not involved, or that they had already stopped using the service. Seeing a familiar brand in a headline does not tell you whether a scan of your ID was sitting in an account.

What to actually expect

• You may get a notice from IDScan.net, or be pointed to its help line at [phone withheld], offering free credit monitoring and identity protection. A notice means the company thinks your information could be in the affected set. Getting no letter does not prove you were spared; these mailings run late and miss people.
• You will not get a reliable yes or no for your specific license. News stories will keep citing 153 million records. That number comes from reporting about an online service that advertised scanned licenses; the company has not confirmed it, and some outlets could not re-check that service after it went offline.
• The fraud to watch for is someone opening credit, filing a tax return, or using your license number as if they were you — not a sudden login to your email or bank app.
• Lawsuits have been filed. Those are allegations, not a finding, and they will not tell you whether you were included or get the data back.

What you can and cannot fix

If your name and driver’s license or ID number were copied, that copy cannot be taken back. It cannot be deleted from whoever has it. Replacing the physical card does not reliably change the number, and a new number does not erase the old one. Treat that identifier as permanently known to someone who should not have it.

What still helps, in this order:

• Freeze your credit with Equifax, Experian, and TransUnion. The free monitoring the company is offering will warn you after someone tries to open an account. A freeze is what actually blocks the account from opening. That matters here because a name plus a government ID number is raw material for new-account fraud — even though a Social Security number was not listed in the company’s statement.
• Get an IRS Identity Protection PIN so a tax return is harder to file in your name. License data is useful for impersonation; a fake tax filing is one of the ways that shows up.
• Do not pay anyone who calls you about this. Use a written notice you can verify, or the company’s published line, [phone withheld]. Scammers ride events like this and will pretend to be the company, a bank, or the government.
• Take down the extra file the internet already keeps on you. A leaked name and license number becomes far more useful when it can be matched to relatives, phone numbers, employers, and old addresses. People-search listings add those pieces. Unlike the stolen records, those listings can actually be removed. That is the lever you still have: not recalling what left IDScan.net, but starving a stranger of the rest of the picture they would build around it.