← Latest briefing

Technology

Dark web service Nexus reportedly sells over 153 million driver's license scans

An investigation found high-resolution multi-spectrum ID scans available on illicit markets shortly after in-person scanning events.

The short version

  • A dark web identity theft marketplace named Nexus has reportedly listed more than 153 million driver's licenses for sale, according to reporting by KrebsOnSecurity.
  • The illicit listings feature multi-spectrum scans, including standard, infrared, and ultraviolet captures of both the front and back of IDs.
  • Victims identified in the dataset include security researchers, journalists, a car rental customer, and an FBI assistant director.
  • The precise security breach or third-party scanning vendor responsible for leaking the IDs has not been publicly confirmed.

Key facts

  • An investigation by KrebsOnSecurity reported that an illicit platform named Nexus offered more than 153 million driver's licenses for sale.[Ars Technica]
  • The Nexus data offerings include high-resolution scans taken under standard, infrared, and ultraviolet light, which can potentially be used to manufacture counterfeit credentials that bypass hologram checks.[Ars Technica]
  • Identified records in the cache include credentials belonging to journalist Brian Krebs, his mother, an FBI assistant director, security researchers, and an Ars Technica journalist.[Ars Technica]
  • An Ars Technica reporter documented that their driver's license appeared on the platform within hours of being scanned at a car rental agency.[Ars Technica]

What remains uncertain

  • The specific commercial vendor, system vulnerability, or data pipeline responsible for capturing and leaking the multi-spectrum ID scans remains unverified.[Ars Technica]

Sources