People notified that IDScan.net may have exposed their name and driver’s license or other government ID number may be covered by proposed class actions alleging the ID-verification company failed to protect data taken between April and September 2026. No class has been certified and there is nothing to file yet.
Allegations Only · No Settlement Yet
This article describes proposed class action complaints. The claims in them are unproven allegations. IDScan.net has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.
What the IDScan.net Lawsuits Are About
IDScan.net is a New Orleans company whose scanners and software let businesses read and verify driver’s licenses and other IDs at the counter. In early September 2026, after reports that a dark web service was selling scans of U.S. and Canadian licenses, IDScan.net said an unauthorized third party may have accessed or copied customer information. Proposed class actions followed within days in the U.S. District Court for the Eastern District of Louisiana.New Orleans station WWL-TV counted 18 suits as of October 2026. Court listings show cases filed from early September through October 8, including Bunch v. IDscan.net, Inc., No. 2:26-cv-01929, among the first. The complaints claim IDScan.net did not adequately protect the ID data it held. No class has been certified, no settlement has been announced and there is nothing to claim.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Happened
On August 31, 2026, a source alerted security journalist Brian Krebs to a service called Nexus on a Russian-language cybercrime forum. It advertised more than 153 million U.S. and Canadian driver’s licenses, plus millions of other ID documents. KrebsOnSecurity linked the images to IDScan.net by interviewing people whose licenses appeared in Nexus, and the FBI’s New Orleans field office opened an inquiry on September 1. Nexus went offline that evening.IDScan.net’s report to the Oregon Department of Justice lists the breach as running from April 1 to September 2, 2026, with discovery on September 1 and consumer notices sent September 4. The company said it was notifying affected people and offering credit protection services.
What Information Was Involved
IDScan.net’s notice says the data may include full names and driver’s license or other government-issued identification numbers. The records KrebsOnSecurity examined in Nexus included front and back license images, infrared and ultraviolet scans and timestamps. IDScan.net has not publicly confirmed whether images were part of what was taken.How Many People Are Affected
IDScan.net reported 13,000,000 people affected to the Oregon Department of Justice on September 18, 2026. The 153 million figure comes from the Nexus listing and has not been confirmed by IDScan.net or law enforcement. Because IDScan.net works behind the scenes for other businesses, many people who received a notice may not recognize the company’s name.The Lawsuits in New Orleans Federal Court
Suits identified in court listings, all in the Eastern District of Louisiana:- Bunch v. IDscan.net, Inc., No. 2:26-cv-01929
- Katz et al. v. IDscan.net, Inc., No. 2:26-cv-01949, filed September 4, 2026
- Buckles v. IDscan.net, Inc., No. 2:26-cv-01954, filed September 4, 2026
- Sullivan v. IDscan.net, Inc., No. 2:26-cv-01956, filed September 4, 2026
- Laporte et al. v. IDscan.net, Inc., No. 2:26-cv-01974, filed September 8, 2026
- Carter et al. v. IDScan.net, Inc., No. 2:26-cv-01983, filed September 9, 2026
- Rodriguez v. IDscan.net, Inc., No. 2:26-cv-02025, filed September 10, 2026
- Baker v. IDscan.net, Inc., No. 2:26-cv-02164, filed September 24, 2026
- Sakalinskas v. IDscan.net, Inc., No. 2:26-cv-02188, filed September 28, 2026
- Chambers v. IDscan.net, Inc., No. 2:26-cv-02191, filed September 28, 2026
- McGaha v. IDscan.net, Inc. et al., No. 2:26-cv-02336, filed October 8, 2026, which also names Circa Hospitality Group, LLC
When many suits over one breach land in the same court, they are commonly consolidated into a single case with lead counsel appointed for the plaintiffs. No consolidated complaint or settlement had been reported as of October 21, 2026.
Is There Anything to Claim?
No. There is no settlement, claim form or settlement website. A proposed class covers everyone who fits its definition, so there is no sign-up step while the cases are pending. If the litigation settles, a court-approved notice would explain who qualifies and how to file.Questions
Were 153 million driver's licenses stolen in the IDScan breach?
That number has not been confirmed. It comes from a dark web service called Nexus, which advertised more than 153 million U.S. and Canadian driver’s licenses, according to KrebsOnSecurity. IDScan.net’s own filing with the Oregon Department of Justice reports 13,000,000 people affected.
Why would someone who never heard of IDScan.net get a breach notice?
IDScan.net sells ID scanning and verification tools to other businesses, so people usually interact with the business at the counter rather than with IDScan.net itself. Its customers have included rental car, shipping and cannabis dispensary businesses, according to Infosecurity Magazine.
Is the FBI investigating the IDScan breach?
KrebsOnSecurity reported that the FBI’s New Orleans field office opened an inquiry into an apparent breach involving IDScan.net on September 1, 2026. No charges had been announced as of October 21, 2026.
Are businesses that used IDScan.net also being sued?
At least one suit, McGaha v. IDscan.net, Inc. et al., No. 2:26-cv-02336, filed October 8, 2026, also names Circa Hospitality Group, LLC as a defendant. The other suits identified in court listings name only IDscan.net, Inc.
Sources
- Oregon Department of Justice data breach list: IDScan.net, reported September 18, 2026; 13,000,000 affected
- KrebsOnSecurity, “FBI Probes Service Selling 153M+ Drivers Licenses”, September 1, 2026, with updates
- Infosecurity Magazine, “Multiple Class Action Lawsuits Filed Against IDScan”, September 7, 2026
- WWL-TV, lawsuits filed against New Orleans software company, October 2026
- U.S. District Court for the Eastern District of Louisiana, case listings for the suits named above
