A new dark web identity theft service called Nexus is advertising digital scans of more than 153 million driver’s licenses from people in the United States and Canada, sparking an FBI investigation into a suspected data breach at identity verification provider IDScan.net.[1][5][6]
Security journalist Brian Krebs reported that Nexus, which launched this week on the dark web, is offering more than 153 million driver’s licenses, 10 million ID cards, over three million travel documents, and at least 579,000 medical cards, including marijuana dispensary cards.[1][3][5] The service’s operators claim the images originate from an active breach at “a major identity verification company,” and analysis of timestamps on affected records points to scans collected at car-rental counters and cannabis dispensaries using IDScan.net’s infrared and ultraviolet ID-checking systems.[1][3][6] Krebs found some records containing front-and-back images of licenses alongside IR and UV scans, with time and location data that appeared to match victims’ travel or vehicle rental activity.[1][3]
After Krebs shared evidence with federal agents, the FBI’s New Orleans field office opened an official inquiry into the apparent breach and the dark web sale of ID images, according to multiple reports.[1][2][6] IDScan.net, a Louisiana-based identity verification vendor whose clients include brands such as Hertz, Target, FedEx, and Caesars Entertainment, told customers it was investigating a “potential security incident” and had not yet determined the scope or nature of any unauthorized access.[1][3][5] The company reportedly processes more than 21 million ID verifications each month at over 20,000 locations worldwide, suggesting that a confirmed compromise could eclipse recent driver’s license data spills, including a 6.9 million–record incident disclosed by insurance provider AssuranceAmerica in July 2026.[5][15]
Unlike passwords, driver’s licenses and other government IDs are extraordinarily difficult to change, and high-resolution images tied to names, addresses, dates of birth, and license numbers provide a durable foundation for identity fraud.[1][9] Legal scholars have noted that the appearance of driver’s license data on the dark web can itself constitute a concrete privacy harm, because the information is effectively on a path to broad public exposure.[9]
IDScan.net markets its technology as a way for regulated businesses, including marijuana dispensaries, to minimize liability and protect their licenses by validating customers’ age in seconds, underscoring how age checks routinely involve copying and storing sensitive identity documents.[1][6][10] The Nexus dataset illustrates how those routine scans accumulate across retailers, rental counters, and online services into a sprawling ecosystem of vendors, contractors, cloud platforms, and policies that many consumers never see but whose security directly affects them.[1][10]
Shortly after Krebs published his investigation, the Nexus website reportedly disappeared from the dark web, replacing its login page with a brief notice that the service was no longer available, though it is unclear whether the underlying dataset has stopped circulating among criminals.[1][3] Organizations that outsource identity verification to third parties will likely face renewed pressure to scrutinize how long ID images are stored, what security controls protect them, and how quickly they can detect and contain breaches at vendors that sit between them and their customers.[6][10]
For individuals, the incident is a reminder to question why an online service needs a copy of a driver’s license or passport, whether it is legally required, and what will happen to that document after verification. Where possible, choosing services that offer privacy-preserving age checks instead of demanding full ID uploads, avoiding email submission of ID images, monitoring for phishing and fraudulent account recovery attempts, and using tools such as credit freezes can reduce the fallout if identity documents are exposed.
References
- FBI Probes Service Selling 153M+ Drivers Licenses
- ФБР начало расследование утечки в даркнет водительских прав главы Пентагона
- FBI Probes Service Selling 153M+ Drivers Licenses –…
- FBI Probes Service Selling 153M+ Drivers Licenses
- Pieter Arntz | Malwarebytes Labs
- Standing in the Dark: Fourth Circuit Finds …
- Shield53 Insights | Corporate Security Intelligence
- Another massive data breach exposed millions of driver’s …
