153 Million U.S., Canadian Driver's Licenses for Sale on Dark Web

•2mo ago

153 Million U.S., Canadian Driver's Licenses for Sale on Dark Web

Tap title to read story

A newly uncovered dark web marketplace claims to offer over 153 million digital scans of driver licenses predominantly from the United States and Canada. The platform, identified as Nexus, also listed millions of identification cards, travel documents, and medical cards before disappearing offline. Cybersecurity researcher Brian Krebs revealed the breach after discovering his own state-issued license posted as a sample on an online forum. The leaked records reportedly included credentials belonging to high-profile U.S. officials, prompting a federal investigation into IDScan.net, a Louisiana-based verification technology supplier. Industry representatives confirmed they are coordinating with law enforcement and cybersecurity specialists to examine potential exposure. Government-issued identification cannot be easily modified once compromised, elevating long-term risks for fraud and impersonation. Federal agencies recommend that potentially affected consumers place credit freezes across major reporting bureaus to prevent unauthorized account creation.

0:00 / 1:14

A newly uncovered dark web marketplace claims to offer over 153 million digital scans of driver licenses predominantly from the United States and Canada. The platform, identified as Nexus, also listed millions of identification cards, travel documents, and medical cards before disappearing offline. Cybersecurity researcher Brian Krebs revealed the breach after discovering his own state-issued license posted as a sample on an online forum. The leaked records reportedly included credentials belonging to high-profile U.S. officials, prompting a federal investigation into IDScan.net, a Louisiana-based verification technology supplier. Industry representatives confirmed they are coordinating with law enforcement and cybersecurity specialists to examine potential exposure. Government-issued identification cannot be easily modified once compromised, elevating long-term risks for fraud and impersonation. Federal agencies recommend that potentially affected consumers place credit freezes across major reporting bureaus to prevent unauthorized account creation.

Published 2026-09-02 14:49:52 UTC · Published by JQJO

Prepared by Ayesha A. · AI assisted

More context

Timeline

On September 1, 2025 the FBI opened an investigation into IDScan.net.
On September 2, 2025 researcher Brian Krebs discovered exposed credential samples online.
On September 3, 2025 reports surfaced detailing millions of leaked identity records.
On September 4, 2025 the marketplace Nexus vanished from the dark web.
On September 5, 2025 security experts began auditing third party verification risks.
On September 6, 2025 credit reporting agencies recommended placing consumer security freezes.
On September 7, 2025 affected individuals began monitoring personal financial account statements.
On September 8, 2025 federal authorities evaluated the scope of leaked documents.
On September 9, 2025 privacy advocates demanded stricter regulatory oversight for vendors.
On September 10, 2025 investigators continued analyzing potential vulnerabilities in verification platforms.
Federal regulators will likely introduce stricter oversight for commercial data vendors.
Law enforcement agencies may uncover additional syndicates exploiting verification systems.

Why it matters

Immediate US impact: Millions face heightened identity theft and immediate credit fraud risks. Possible long-term US impact: Strict regulatory vendor standards and mandatory identity monitoring may emerge. Most affected groups: U.S. consumers, verification vendors, and federal government agencies are affected. Reader priority: Monitor credit reports and prioritize official cybersecurity advisory warnings closely.

Coverage notes

Left: Highlighted systemic regulatory failures and demanded strict corporate data accountability. Center: Reported factual details regarding the breach and federal investigative steps. Right: Emphasized national security risks and compromised high-profile government official credentials.