A major identity verification service appears to have suffered a massive data breach, exposing hundreds of millions of government-issued IDs such as driver’s licenses and passports.

The FBI’s New Orleans field office is reportedly probing the incident, while the company behind the service, IDScan, says it is investigating; the DoD has acknowledged awareness but has not released further details.

The Nexus service reportedly went offline shortly after the initial reporting, signaling an impact on the system’s availability.

The breach may have involved near real-time exfiltration from the identity verification system, suggesting ongoing unauthorized access at the time of discovery.

A post advertising Nexus claimed that customer photos linked to IDs are displayed, and independent verification confirmed at least one driver’s license appeared in the database.

The hacker-hosted Nexus site on the dark web claims access to over 150 million IDs from the United States and Canada, with roughly 500,000 new documents added each day.

The incident occurs amid rising age-verification laws that require identity documents, underscoring the risks of storing large volumes of ID data by private companies.

Independent security journalist Brian Krebs identified IDScan as the likely breach source, noting it processes IDs for major brands and governments.

If confirmed, this would rank among the largest known breaches of identity documents in recent memory.