Alleged IDScan breach puts 150 million IDs up for sale, including Pete Hegseth’s license

News Editor

2026-09-02 13:59:27

Identity verification firm IDScan.net is at the center of an alleged data breach that may have exposed more than 150 million identity records, according to a report cited by Protos. Among the documents reportedly listed for sale on the dark web is the driver’s license of US Secretary of War Pete Hegseth, which was said to be available for $100. KrebsOnSecurity reported that the FBI is investigating the incident. The leaked data was allegedly being marketed through the Russian identity theft service Nexus, which claimed to hold travel documents, medical cards, and other forms of identification. Nexus also said it had been continuously extracting fresh data for more than a year, with hundreds of thousands of new records added in recent days, though KrebsOnSecurity noted the service is no longer reachable. Cybersecurity analyst vx-underground shared a list of IDScan clients that may have been affected, including Shell, FedEx, Hertz, GameStop, Caesars Entertainment, Motorola, and several other companies and institutions. Privacy researcher Zach Edwards said his own ID appeared in the leaked dataset after visiting Planet 13 in Las Vegas. Separate security incidents this week also hit X users and Dropbox, while stolen GTA VI footage was reportedly used by a pseudonymous X account to promote a cryptocurrency.

More than 150 million identity documents have allegedly been put up for sale on the dark web following an apparent breach at identity verification company IDScan.net. One of the records reportedly exposed is the driver’s license of US Secretary of War Pete Hegseth.

Alleged IDScan breach puts 150 million IDs up for sale, including Pete Hegseth’s license 2

Protos, citing KrebsOnSecurity, reported that Hegseth’s ID could be accessed for $100 through the Russian identity theft service Nexus. KrebsOnSecurity also said the FBI is investigating the breach.

Nexus claimed it held records that included travel documents, medical cards, and other forms of identification. It also said it had been "continuously exfiltrating new data for over a year into our private database," adding that hundreds of thousands of fresh details had been added over the past few days. KrebsOnSecurity noted that Nexus is no longer available.

Fortune 500-linked customers may be exposed

Cybersecurity analyst vx-underground shared a list of IDScan clients whose data may have leaked. The list includes Shell, AMC Theaters, DraftKings, Dutchie, FedEx, Hertz, Chevrolet (General Motors), GameStop, Jack Henry, MRI (Checkpoint ID), Polaris, Simmons Bank, LendingUSA, Circa Resort & Casino, Planet 13, Rouses Market, US Coast Guard Academy, Caesars Entertainment, and Motorola.

Nexus reportedly described the incident as involving "a major identity verification company" that counts multiple Fortune 500 companies among its customers.

Researcher links leak to cannabis dispensary ID scan

Privacy researcher Zach Edwards said his ID was exposed after he visited Planet13 in Las Vegas, which he described as the largest cannabis dispensary in the world.

Alleged IDScan breach puts 150 million IDs up for sale, including Pete Hegseth’s license 3

Edwards said the available evidence points to "IDscan having a hellacious ongoing real-time breach of their data."

Fresh leaks and hacks continue to pile up

This week, thousands of X users were alarmed by suspicious password reset emails sent to their accounts. Last month, cloud storage company Dropbox was also hacked, allowing attackers to view data tied to 5,000 compromised accounts.

In a separate case, unreleased footage from the upcoming game GTA VI was leaked by pseudonymous X user Cyberleek, who then used the stolen clips to pump a cryptocurrency.

The report was originally published by Protos under the headline "150 million IDs allegedly stolen — including Pete Hegseth’s."

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.

300

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.