NEW ORLEANS — Over 150 million U.S. and Canadian driver's licenses being sold on the dark web may be linked to a New Orleans-based identity-verification company, according to a report by nola.com.

The breach has led to an investigation by the FBI to determine if the leaked government-issued documents, including medical identification documents and travel IDs, stemmed from a local cybersecurity firm called IDScan. 

IDScan sells products that provide several ID-verification services, including catching fake IDs, scanning employee cards for building access and age-verifying entry to websites and venues, and has also worked with several major brands including Hertz, FedEx and GameStop.

The FBI began investigating the breach following KrebsOnSecurity's Sept. 1 report on the issue. According to publisher and cybersecurity expert Brian Krebs, the dark web forum selling the IDs shut down shortly after his initial report. 

Krebs claimed that an assistant FBI director, along with U.S. Defense Secretary Pete Hegseth, were among those whose information appeared for sale on the forum. 

On Friday, IDScan released the following statement: