IDScan confirmed 153 million driver's licence scans were stolen

Assessment

IDScan.net's 4 September notice confirms that an unauthorised third party "may have accessed and/or copied certain customer information" including "full names and driver's license or other government-issued identification numbers." It gives no number of records or individuals and does not mention images or scans. The 153 million figure is the Nexus seller's inventory count, which Krebs found plausible from the search interface. Headlines joining "IDScan confirms" to "153 million" attribute the seller's number to the vendor. The vendor has confirmed a breach; it has confirmed no count.