Massive Data Breach Exposes 1.1M Canadian Driver's Licences on Dark Web
A Louisiana-based identity verification company's security failure has exposed roughly 1.1 million Canadian driver's licences in what could be one of the largest government-ID breaches ever. The RCMP and FBI are investigating.
On September 1, 2026, independent security journalist Brian Krebs discovered a dark web marketplace called "Nexus" offering more than 153 million digital scans of driver's licences from the United States and Canada for sale. IDScan.net, a Louisiana-based company that provides identity verification services for retailers, bars, and car rental counters across North America, has since confirmed that unauthorized access to its cloud systems occurred around that date.
What Canadians Should Know
- Approximately 1.1 million Canadian driver's licence records were compromised, containing names and ID numbers
- The company detected the breach on or around September 1 and immediately began securing its environment
- The RCMP confirmed it is "monitoring" the situation and coordinating with international law enforcement partners; the FBI opened a formal investigation on September 2
- Identity verification companies like IDScan.net process millions of transactions monthly at retail checkouts, bars, cannabis dispensaries, and rental counters
This breach could expose Canadians to identity theft, fraud, and unauthorized account creation. Security experts recommend monitoring credit reports, freezing credit with major bureaus, and watching for unauthorized new account applications in your name. If you believe your driver's licence was exposed, review guidance from the Office of the Privacy Commissioner of Canada. Organizations handling your personal information are required to notify affected individuals if a breach poses significant harm; if you haven't been contacted and suspect exposure, you can file a complaint with the Privacy Commissioner.
Sources
MyHAbroad is an independent app and is not affiliated with, endorsed by, or representing any government or public authority. This is general information only — not legal, tax, medical, or financial advice. Always verify with the official source before acting:
