[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

4 clusters · 43 sources · 10 days · First seen · Last updated

North American driver's license data breach

Overview

A massive data breach involving a dark web marketplace known as Nexus has exposed approximately 170 million identity records. The leaked trove includes over 153 million driver’s licenses from the United States and Canada, 10 million other forms of identification, 3 million travel documents, and at least 579,000 medical cards.

Cybersecurity journalist Brian Krebs confirmed the authenticity of the data after criminals provided a copy of his own driver’s license as proof. The breach also includes sensitive identification for high-profile figures, such as U.S. Defense Secretary Pete Hegseth and an assistant director of the FBI.

IDScan, a Louisiana-based identity verification technology company used by services such as Hertz, has since confirmed the breach. The company stated the incident went undetected for roughly one year and affects over 153 million driver’s licenses, including approximately 1.1 million from Canada. IDScan serves various sectors, including hospitality, car rentals, and cannabis dispensaries, with a client list including Target and Caesars Entertainment.

The FBI’s New Orleans field office is currently investigating the matter. IDScan has indicated it is working with external experts and will provide credit monitoring and identity theft protection services to those affected.

Experts warn that this breach is significantly more dangerous than a standard password leak. Because the stolen data includes high-resolution infrared and ultraviolet scans used to authenticate physical documents, criminals may possess the technical blueprints required to create highly convincing fraudulent IDs. This poses a long-term threat to identity verification systems used by banks, cryptocurrency exchanges, and car rental agencies.

Entities

FBI · Brian Krebs · IDScan.net · Nexus · Hertz

Timeline

  1. about 16 hours ago

    [TECHNOLOGY] 2 sources
    IDScan confirms breach of 153 million driver's licenses

    Identity verification firm IDScan confirmed a year-long data breach exposing over 153 million driver's licenses and millions of other identity documents across the US and Canada.

  2. 3 days ago

    [TECHNOLOGY] 8 sources
    Nexus data breach exposes 170 million identity records

    A dark-web marketplace called Nexus has leaked roughly 170 million records, including 153 million U.S. and Canadian driver’s licenses, threatening global identity verification systems.

  3. 7 days ago

    [TECHNOLOGY] 6 sources
    FBI investigates dark web marketplace selling millions of driver's licenses

    The FBI is investigating a dark web marketplace called ‘Nexus’ that allegedly sold over 153 million driver's licenses from the US and Canada, potentially sourced from a Louisiana identity verification firm.

  4. 10 days ago

    [TECHNOLOGY] 28 sources
    Nexus dark web service sells 153 million stolen driver's licenses

    The FBI is investigating a massive dark web data breach via the Nexus service, which allegedly sells over 153 million driver's license scans from the US and Canada, including those of high-ranking officials.

Sources

20minutos.es · americafirstreport.com · au.pcmag.com · baogialai.com.vn · boingboing.net · ca.sports.yahoo.com · ciente.io · cnet.com · cyberinsider.com · cybernoz.com · detlionblood32.wordpress.com · diebewertung.de · drweb.de · europesays.com · freerepublic.com · giaoducthoidai.vn · gigazine.net · gizmodo.com · goniec.net · govtech.com · hawaiitribune-herald.com · innovations.fr · it-boltwise.de · japan.cnet.com · krebsonsecurity.com · metro.co.uk · nemosnewsnetwork.com · news.bitcoin.com · nypost.com · pcauthority.com.au · pymnts.com · rockyharbour.ca · san.com · shiftdelete.net · singtaousa.com · soha.vn · techcrunch.com · thecyberwire.com · uk.pcmag.com · wbrz.com · wltreport.com · wnd.com · wwwhatsnew.com

This summary has been updated 3 times: see revision history