← Latest briefing

Technology

Over 153 million driver's license scans exposed on dark web in suspected IDScan breach

A cybercrime marketplace marketed identity records including U.S. and Canadian driver's licenses before going offline amid an FBI investigation.

The short version

  • A service called Nexus offered more than 153 million scanned identification documents for sale on the dark web.
  • Cybersecurity reporter Brian Krebs verified the authenticity of the records, which include documents belonging to himself and U.S. Defense Secretary Pete Hegseth.
  • The breach is suspected to originate from Louisiana-based identity verification provider IDScan, prompting an FBI investigation.
  • The Nexus platform has since shut down, though the extent of data distribution remains unconfirmed.

Key facts

  • A dark web platform called Nexus listed more than 153 million digital scans of U.S. and Canadian driver's licenses, residence cards, medical records, and employment files for sale.[Engadget]
  • Cybersecurity journalist Brian Krebs verified the authenticity of the documents after finding his own license used as a promotional sample on the cybercrime forum Exploit.[Engadget]
  • The exposed database included a scan of the driver's license of U.S. Secretary of Defense Pete Hegseth.[Engadget]
  • Krebs identified Louisiana identity verification vendor IDScan as the likely source of the compromised records, noting affected individuals had used services such as Hertz.[Engadget]
  • The FBI's New Orleans field office initiated an investigation into the security incident.[Engadget]
  • The Nexus website has closed down, displaying a notice that the service is no longer accessible.[Engadget]

What remains uncertain

  • It is not yet confirmed by law enforcement or IDScan whether IDScan's systems were the definitive source of the compromised records.[Engadget]
  • The full volume of data downloaded or purchased by third parties before Nexus went offline remains unknown.[Engadget]

Sources