IDScan Breach: 170 Million U.S. and Canadian IDs Allegedly Stolen

Name: IDScan Breach: 170 Million U.S. and Canadian IDs Allegedly Stolen
Uploaded: 2026-09-10T21:40:50.512592Z
Duration: 135 s
Description: CBS News reports on a massive data breach at ID verification company IDScan, which allegedly exposed 170 million driver's licenses and IDs, including one belonging to Pete Hegseth. The video is for consumers, security professionals and compliance officers tracking large-scale identity data breaches and their legal fallout.

CBS News reports on a massive data breach at ID verification company IDScan, which allegedly exposed 170 million driver's licenses and IDs, including one belonging to Pete Hegseth. The video is for consumers, security professionals and compliance officers tracking large-scale identity data breaches and their legal fallout.

Transcript

Hackers have allegedly stolen 170 million US and Canadian IDs, including Pete Hegseth's. These IDs were put up for sale for $100 a piece on a Russian cybercrime forum called Exploit. There's about a 50 % chance that your ID is up there, like the ID of an assistant FBI director or War Secretary Pete Hegseth's driver's license. If you've had your ID scanned when renting a car from Hertz, collecting mail from FedEx, or applying for a loan on... USA, you might have been hit in this hack too. That's because IDscan, the ID verification company that all those big firms reportedly use, is the one believed to have been compromised by a massive breach. IDscan says in this promotional video that it has sophisticated and secure technology. Security experts say hackers appear to have infiltrated their databases and continued stealing ID scans in real time for a whole year. Zach Edwards, a threat researcher at Infoblox, found his records appear to have been uploaded the day after he scanned his ID at a cannabis dispensary in Las Vegas that is a customer of IDScan. And cybersecurity reporter Brian Krebs, who broke this story on his website on Tuesday, found his driver's license was leaked after he used it to rent a car from Hertz, which also uses IDScan. Experts we spoke to say the scans could be used... to fake your identity and take control of your financial accounts phone numbers or make transactions in your name it could also be used by bad actors to find vulnerable people like domestic violence victims people in witness protection or agents working undercover texas cyber security attorney nicholas hall told us that in california alone the minimum legal claim for the hack would be between 107 and 799 dollars per person and that before counting any particular damages they suffered. CBS News has reviewed four lawsuits by hacking victims already filed against IDScan in Louisiana Federal Court, where the company is based. And lawyers say there's more coming. They say the liability over the leak could reach billions of dollars. IDScan says they're investigating. The FBI has also launched an investigation.