The Federal Bureau of Investigation has launched an official probe into a massive data breach involving stolen digital identification documents. A new dark web service called Nexus is currently selling digital scans of more than 153 million driver’s licenses belonging to residents across the United States and Canada. The hackers behind the operation claim the data comes from an active intrusion at a major identity verification firm.
Hackers exploit a major identity verification firm to steal licenses
The New Orleans field office of the FBI is leading the investigation into the incident. Security researchers traced the stolen documents to a Louisiana-based company that handles identification checks for large corporate clients. The compromised firm counts several Fortune 500 brands among its customers, including Hertz, Target, FedEx, and Caesars Entertainment.
Journalist Brian Krebs verified the legitimacy of the stolen records by locating his own driver’s license on the dark web platform. Other security experts and victims also found their personal documents, including high-ranking government officials like United States Defense Secretary Pete Hegseth. The leaked data includes front and back scans of driver’s licenses, along with millions of medical cards, state identification cards, and travel documents.
Don’t miss the best of The Mac Observer
Set us as a preferred source and our Apple reporting ranks higher in your Google Search results and Discover feed — one tap, no account changes.
The hackers claim to have maintained long-term access to the internal network of the verification company for over a year. The group says it is still pulling new records daily. In just one 24-hour period this week, the database grew by nearly 400,000 fresh identification scans. The breached company stated it initiated its incident response protocols and engaged outside forensic teams to secure its systems.
The FBI has not yet indicated if it can shut down the Nexus platform or identify the operators. Until federal agents neutralize the threat, anyone who recently provided a physical identification card to a major retail or rental business should freeze their credit and monitor for fraudulent accounts.
Discussion