Suspected massive data breach exposes millions of ID records

The stolen data surfaced on a dark web marketplace called Nexus, which claimed to ingest roughly half a million new documents every day. Security researcher Zach Edwards and Krebs traced the breach to IDScan, a Louisiana-based provider that processes verification checks for major tech and consumer brands. The database included authentic records, with the personal identification of Secretary of Defense Pete Hegseth reportedly found among the searchable files.

While IDScan chief operating officer Jillain Kossman stated the company is investigating the matter, the firm has yet to provide a formal public response. The FBI’s New Orleans field office is reportedly probing the breach, which forced the Nexus site offline shortly after the findings were published. The scale of the exposure highlights the risks inherent in identity verification mandates, which often require businesses to store vast quantities of sensitive citizen data.