Consumer Alert: Data breach compromises 153M drivers’ licenses. Here’s what you should do ROCHESTER, N.Y. — A massive data breach at an identity verification company may have exposed the driver’s licenses and personal information of more than 153 million Americans and Canadians. A journalist who covers cybersecurity, Brian Krebs, discovered his driver’s license was being sold on the dark web. Thieves also claimed to have the driver’s license of Secretary of War Pete Hegseth, high-ranking officials and tens of millions of regular people. The stolen information is believed to have come from hacking ID Scan.net, also known as Veriscan. According to its website, the company is used for ID fraud prevention by more than 7,500 businesses worldwide. The company did not verify the hacking, only confirming to Krebs that it was investigating. “The type of data that’s been exposed here is really serious. More than 153 million drivers’ licenses, more than 10 million ID cards, 3 million travel documents and 500,000 medical cards including dispensary cards,” said Jared Connors, an attorney with the firm Meyer Wilson Werning that specializes in representing cybersecurity victims. Some of the businesses that use Veriscan include car rental companies, hotels, retailers, dispensaries and banks. The company’s website says it has verified more than 40,000 scans from banks from December 2024 to the present. Much or all of that information could now be in the hands of thieves who sell it on the dark web to the highest bidder. With a copy of your license, thieves now have your name, address, birth date, driver’s license number, picture and the document number on the back of the card used by state agencies to verify if your license is real. “The most immediate concern is that you’re at risk of identity theft,” Connors said. Thieves can use that