Technology
Researchers link dark web database of 150 million ID cards to verification firm IDScan
A newly launched dark web site offered searchable driver's licenses and passports from the U.S. and Canada before going offline.
The short version
- A dark web service named Nexus advertised searchable access to over 150 million North American passports and driver's licenses before going offline.
- Security researchers Brian Krebs and Zach Edwards identified Louisiana-based identity verification provider IDScan as the likely origin of the leaked files.
- IDScan stated that it is investigating the matter, while the FBI's New Orleans field office is reportedly probing the breach.
Key facts
- A dark web platform called Nexus claimed to offer searchable access to more than 150 million U.S. and Canadian driver's licenses and passports, purportedly acquiring roughly 500,000 new records daily.[TechCrunch]
- Security journalist Brian Krebs and researcher Zach Edwards concluded the data likely originated from IDScan, a Louisiana-based identity verification service.[TechCrunch]
- Krebs confirmed the authenticity of the leak after discovering his own driver's license in the database, while U.S. Secretary of Defense Pete Hegseth's photo was also listed.[TechCrunch]
- IDScan's chief operating officer confirmed the firm is investigating the incident, and the FBI's New Orleans field office is reportedly investigating as well.[TechCrunch]
- The Nexus website was taken offline shortly following the publication of Krebs's report.[TechCrunch]
What remains uncertain
- The exact method of the breach, the definitive total number of compromised documents, and formal attribution confirming IDScan as the definitive source remain unconfirmed pending ongoing investigations.[TechCrunch]