IDScan.net

Stories

Researcher recovers hidden verification keys from driver's license barcodes

As of September 2026: Confirmed breach affecting 153 million driver's licenses

New York and Virginia sign their driver's license barcodes cryptographically but never published the verification keys, so only their DMVs could check authenticity. A security researcher just derived both keys mathematically from the signatures themselves. Now anyone can build a verifier without state cooperation.

Updated Sep 17

Hackers had a live feed of a U.S. ID-scan company's data for over a year

New Capabilities

As of September 2026: Suspected source of the leaked data; has not confirmed unauthorized access

A dark web service called Nexus has been selling scans of more than 153 million driver's licenses from the U.S. and Canada. The images match the work of IDScan.net, a Louisiana company that verifies IDs for Hertz, Target, FedEx and others.

Updated Sep 7