Risky Business · Wednesday, September 9, 2026
A massive data breach has made approximately 153 million American driver's licenses available online. The compromised company, ID Scan, was reportedly breached for over a year, with attackers continuously exfiltrating data. Security researcher Brian Krabs traced the breach back to ID Scan by correlating his own license details with Hertz rental car records and cannabis dispensary visits.
“This news emerged about, uh, 153 million plus American drivers licenses being available online. And I thought, no, that can't be right.”
“Uh, James, and it seems like, certainly, uh, it was ID scan got owned and not not a little bit owned. They got owned quite a lot.”
“The attacker themselves have been exfiltrating data, uh, continuously for for over a year, I think it was in the article.”
“And, uh, I think even Brian mentioned that even as he was sort of watching this unfold in 24 hours, he saw another 400,000 records get added into the platform.”
“And so he was able to, with another little bit of correlation, linked it back to ID scan as being the source because of course, ID scan themselves says, Hertz trusts them with their ID data.”
“And then he'd gone to Detconal Black Hat, I think it was, he did say, I'd been to a cannabis dispensary. In showing my license there. You go and look at the ID scan press releases and, you know, who trusts us and, sure enough, there is the chain of dispensaries as well.”