Nexus dark web service leaks 153 million North American IDs

A massive data breach involving a dark web service known as Nexus has exposed approximately 153 million driver's licenses and identity documents from the United States and Canada. The service reportedly gained unauthorized access to a major identity verification company, with investigators linking the incident to the Louisiana-based provider IDScan.

The leaked database includes a wide range of sensitive information, such as commercial driver's licenses, marijuana dispensary cards, and Common Access Cards (CAC) used for secure government facility access. Notably, the dataset contains records for high-ranking U.S. officials, including Defense Secretary Pete Hegseth. The breach is considered a significant national security concern, as the data could be utilized by foreign adversaries for intelligence operations, phishing, and identity theft.

The FBI's New Orleans field office has launched an official inquiry into the matter. While the Nexus service disappeared from the dark web shortly after reports surfaced, operators previously claimed to have been continuously exfiltrating data for over a year. The breach includes roughly 1.1 million Canadian records, with a high concentration in Ontario.