IDScan

A dark-web marketplace called Nexus claims to hold over 153 million driver's license records, 10 million ID cards, and 579,000 medical cards, some paired with front-and-back scans in visible, infrared, and ultraviolet light. Krebs traced nine sample matches by timestamp and transaction history to businesses tied to IDScan.net, the identity-verification vendor sitting behind car rental counters, retailers, banks, hotels, and cannabis shops. IDScan has not confirmed a breach, named how anyone got in, or counted who was affected; a law firm did the notifying instead. One verification vendor serving five industries is not a shared perimeter; it is a single point where everyone's risk piles up at once.