Check Your Claims
Class Action Pulse
← Settlements/Data Privacy

IDScan Identity Document Data Investigation — Do You Qualify?

Updated September 5, 2026

Defendant
IDScan.net, Inc.
Status
Under investigation
Potential compensation
If the case succeeds or settles
How to join
Accepting claimants now
Proof required
No claim form proof for basic payout
Check if you qualify →

Overview

Company role
Identity-verification technology used by businesses that scan government-issued IDs
Reported incident
A criminal marketplace advertised a large collection of identity-document images
Confirmed status
The FBI is investigating; IDScan has not publicly confirmed the reported breach or scope
Available now
Preserve scanning records, monitor identity activity, and request attorney review if concerned

IDScan.net is an identity-verification and fraud-prevention technology company. Its products let businesses scan, authenticate, and extract information from driver's licenses, passports, state IDs, and other identity documents. The company markets its tools to industries including automotive, retail, hospitality, financial services, gaming, logistics, and age-restricted businesses. That role matters because a person may have interacted with IDScan's technology through another company rather than by creating an account directly with IDScan.

On September 1, 2026, cybersecurity journalist Brian Krebs reported that a criminal marketplace called Nexus was advertising access to a very large collection of U.S. and Canadian identity-document scans. Krebs reported that searches of the marketplace returned documents belonging to him and other consenting test subjects and that technical and commercial links pointed toward IDScan.net as the apparent source. The FBI's New Orleans field office opened an inquiry, according to Krebs and a separate confirmation reported by BleepingComputer.

The reported collection included claims of more than 153 million driver's-license scans, more than 10 million other ID cards, more than 3 million travel or international documents, and hundreds of thousands of medical cards. Those figures are marketplace claims and investigative reporting, not a final count confirmed by IDScan or a regulator. IDScan had not publicly confirmed a breach or its scope in the reviewed record, and BleepingComputer reported that the company did not respond to its questions.

Attorneys are recruiting people who believe their IDs may have been scanned through businesses using IDScan technology. News reports also describe lawsuits filed in Louisiana, but no court has certified a class, found IDScan liable, approved a settlement, or created a payment process. Requesting attorney review is not the same as filing an official settlement claim.

Who qualifies

  • You had a driver's license, passport, state ID, medical card, or similar document scanned by a business that may have used IDScan.net hardware or software.
  • You rented a vehicle, entered an age-restricted location, completed an identity check, applied for a financial or retail service, or otherwise presented an ID where IDScan technology may have been used.
  • You found evidence that your document image or identity data was exposed, received a notice from IDScan or a business customer, or have a reasonable basis to believe your information may be involved.
  • You understand that no nationwide class has been certified and that an attorney must evaluate whether any filed or future case could cover your circumstances.

How to file your claim

  1. 1Keep receipts, rental agreements, account records, emails, and notices that may show where and when your identity document was scanned.
  2. 2Ask the business that scanned your document which identity-verification vendor it used and whether it received a security notice involving IDScan.net. Do not send a new copy of your ID to an unverified contact.
  3. 3Review credit reports, financial accounts, motor-vehicle records where available, and notices from businesses for activity you do not recognize. Consider a free credit freeze if your risk assessment supports it.
  4. 4Preserve screenshots, correspondence, police reports, replacement-document costs, fraud losses, and time spent responding to suspicious activity.
  5. 5Submit the eligibility form below only if you want an attorney or legal representative to assess your situation. It is not an official claim, does not enroll you in a certified class, and does not guarantee representation or payment.

This case is still developing and has no official claim site yet. Class Action Pulse is not a law firm — submit your details below to be notified and connected with a firm handling the case.

Free Eligibility Check

Do you qualify?

Check your eligibility and get help understanding your claim. It's free and takes under a minute.

Class Action Pulse is not a law firm and does not provide legal advice. Submitting this form does not create an attorney–client relationship. This is attorney advertising.

Sources

Frequently asked questions

Did IDScan confirm that it suffered a data breach?

Not in the public sources reviewed for this draft. Investigative reporting connected the reported document collection to IDScan, and the FBI opened an inquiry, but IDScan had not publicly confirmed a breach, the source of the data, or the number of affected people.

How would I know whether a business used IDScan.net?

A receipt, privacy notice, rental agreement, device label, or the business itself may identify the vendor. Many people may not know because IDScan sells technology to other organizations. Ask the business directly and keep its response.

Are the reported 153 million driver's licenses confirmed victims?

No. The figure comes from what the criminal marketplace advertised and from searches described by investigative reporters. It has not been established as a deduplicated count of affected individuals by IDScan, the FBI, a court, or another regulator.

Has a settlement or payment fund been created?

No settlement, court-approved claim form, guaranteed payment, or settlement deadline was verified. Attorneys are investigating potential claims, and reported lawsuits remain at an early stage.

What does requesting attorney review do?

It gives a lawyer or legal representative information to evaluate whether a legal claim may be available. It does not automatically create an attorney-client relationship, make you a class member, or guarantee that a case will proceed.