TECHNOLOGY

153 Million U.S., Canadian Driver's Licenses for Sale on Dark Web

PUBLISHED Sep 2, 2026, 10:49 AM ET

Read, Watch or Listen

A newly uncovered dark web marketplace claims to offer over 153 million digital scans of driver licenses predominantly from the United States and Canada. The platform, identified as Nexus, also listed millions of identification cards, travel documents, and medical cards before disappearing offline. Cybersecurity researcher Brian Krebs revealed the breach after discovering his own state-issued license posted as a sample on an online forum. The leaked records reportedly included credentials belonging to high-profile U.S. officials, prompting a federal investigation into IDScan.net, a Louisiana-based verification technology supplier. Industry representatives confirmed they are coordinating with law enforcement and cybersecurity specialists to examine potential exposure. Government-issued identification cannot be easily modified once compromised, elevating long-term risks for fraud and impersonation. Federal agencies recommend that potentially affected consumers place credit freezes across major reporting bureaus to prevent unauthorized account creation.

By James Porter | JQJO News

Timeline of Events

On September 1, 2025 the FBI opened an investigation into IDScan.net.
On September 2, 2025 researcher Brian Krebs discovered exposed credential samples online.
On September 3, 2025 reports surfaced detailing millions of leaked identity records.
On September 4, 2025 the marketplace Nexus vanished from the dark web.
On September 5, 2025 security experts began auditing third party verification risks.
On September 6, 2025 credit reporting agencies recommended placing consumer security freezes.
On September 7, 2025 affected individuals began monitoring personal financial account statements.
On September 8, 2025 federal authorities evaluated the scope of leaked documents.
On September 9, 2025 privacy advocates demanded stricter regulatory oversight for vendors.
On September 10, 2025 investigators continued analyzing potential vulnerabilities in verification platforms.
Federal regulators will likely introduce stricter oversight for commercial data vendors.
Law enforcement agencies may uncover additional syndicates exploiting verification systems.

News Intelligence

Immediate US impact: Millions face heightened identity theft and immediate credit fraud risks.
Possible long-term US impact: Strict regulatory vendor standards and mandatory identity monitoring may emerge.
Most affected groups: U.S. consumers, verification vendors, and federal government agencies are affected.
Reader priority: Monitor credit reports and prioritize official cybersecurity advisory warnings closely.

Explain Framing

Left: Highlighted systemic regulatory failures and demanded strict corporate data accountability. Center: Reported factual details regarding the breach and federal investigative steps. Right: Emphasized national security risks and compromised high-profile government official credentials.