Technology
Dark web service Nexus reportedly sells over 153 million driver's license scans
An investigation found high-resolution multi-spectrum ID scans available on illicit markets shortly after in-person scanning events.
The short version
- A dark web identity theft marketplace named Nexus has reportedly listed more than 153 million driver's licenses for sale, according to reporting by KrebsOnSecurity.
- The illicit listings feature multi-spectrum scans, including standard, infrared, and ultraviolet captures of both the front and back of IDs.
- Victims identified in the dataset include security researchers, journalists, a car rental customer, and an FBI assistant director.
- The precise security breach or third-party scanning vendor responsible for leaking the IDs has not been publicly confirmed.
Key facts
- An investigation by KrebsOnSecurity reported that an illicit platform named Nexus offered more than 153 million driver's licenses for sale.[Ars Technica]
- The Nexus data offerings include high-resolution scans taken under standard, infrared, and ultraviolet light, which can potentially be used to manufacture counterfeit credentials that bypass hologram checks.[Ars Technica]
- Identified records in the cache include credentials belonging to journalist Brian Krebs, his mother, an FBI assistant director, security researchers, and an Ars Technica journalist.[Ars Technica]
- An Ars Technica reporter documented that their driver's license appeared on the platform within hours of being scanned at a car rental agency.[Ars Technica]
What remains uncertain
- The specific commercial vendor, system vulnerability, or data pipeline responsible for capturing and leaking the multi-spectrum ID scans remains unverified.[Ars Technica]