Technology
Over 153 million driver's license scans exposed on dark web in suspected IDScan breach
A cybercrime marketplace marketed identity records including U.S. and Canadian driver's licenses before going offline amid an FBI investigation.
The short version
- A service called Nexus offered more than 153 million scanned identification documents for sale on the dark web.
- Cybersecurity reporter Brian Krebs verified the authenticity of the records, which include documents belonging to himself and U.S. Defense Secretary Pete Hegseth.
- The breach is suspected to originate from Louisiana-based identity verification provider IDScan, prompting an FBI investigation.
- The Nexus platform has since shut down, though the extent of data distribution remains unconfirmed.
Key facts
- A dark web platform called Nexus listed more than 153 million digital scans of U.S. and Canadian driver's licenses, residence cards, medical records, and employment files for sale.[Engadget]
- Cybersecurity journalist Brian Krebs verified the authenticity of the documents after finding his own license used as a promotional sample on the cybercrime forum Exploit.[Engadget]
- The exposed database included a scan of the driver's license of U.S. Secretary of Defense Pete Hegseth.[Engadget]
- Krebs identified Louisiana identity verification vendor IDScan as the likely source of the compromised records, noting affected individuals had used services such as Hertz.[Engadget]
- The FBI's New Orleans field office initiated an investigation into the security incident.[Engadget]
- The Nexus website has closed down, displaying a notice that the service is no longer accessible.[Engadget]