153 million driver's license scans from IDScan.net listed on Nexus marketplace hours after capture

IDScan.net, a New Orleans scanner with documented Hertz and Planet13 contracts, feeds data to a third-party service that Nexus accessed in near real time. Listings grew 400,000 records in 24 hours, confirming continuous harvesting rather than a static dump. The infrared and ultraviolet captures expose security features that standard visible-light copies omit, enabling higher-quality forgeries.

Prior incidents, including 2023-2025 point-of-sale breaches at rental counters, showed similar latency between physical presentation and dark-web appearance. IDScan.net's spectral capture adds a new vector: forged documents that pass both human inspection and automated verifiers relying on those exact bands. No public CVE or incident report has yet linked this feed to downstream identity fraud clusters.

Nexus went offline within hours of the initial report. The FBI investigation continues without disclosed indicators of compromise or victim notification lists. Rental operators using IDScan.net now face direct exposure of live transaction streams, forcing re-evaluation of third-party scanner contracts and retention policies.