Over 153 Million Driver’s Licenses Offered for Sale on the Dark Web
Over 153 million driver’s license data files have been put up for sale on the dark web. Details about the leak, believed to originate from IDScan, are in our news report.
A cybersecurity incident that has caused a major stir worldwide has resulted in over 153 million driver’s license data being offered for sale on the dark web. This situation, uncovered by cybersecurity journalist Brian Krebs, directly affects millions of citizens in North America.
The data was offered for sale through a platform called Nexus, operating on the dark web. This platform possessed a vast database containing sensitive documents including driver’s licenses, medical cards, employment records, and residence permits.
Source and Effects of the Leak
Investigations indicate that this massive data leak is linked to IDScan, a Louisiana-based authentication company. The company is known to be used by large car rental companies like Hertz for authentication processes.
IDScan’s client portfolio includes prestigious organizations such as Target, FedEx, Motorola, and Jack Henry. This reveals that the leak is not affected only personal car rental processes but also a much wider corporate network.
Brian Krebs contacted the cybercriminals and requested a copy of his driver’s license, verifying its authenticity. The fact that the criminals also presented a driver’s license belonging to US Secretary of Defense Pete Hegseth as an example highlights the level of the leak.
The Nexus platform was operating by advertising on Exploit, a Russia-based cybercrime forum. Brian Krebs noticed that his credentials were being used as a free sample on this platform and reported the situation.
Investigation and Similar Incidents
The FBI has launched a wide-ranging investigation into the matter through its New Orleans field office. The Nexus platform has currently ceased operations, and its login page is no longer accessible.
This incident is similar to the Discord data breach, where over 70,000 government IDs were leaked as a result of a third-party service provider being hacked. Experts point out that targeting such centralized data verification services poses large-scale risks.
While the removal of the documents from the dark web is seen as a positive development, the fact that the information is still circulating digitally is causing concern. Are you worried that your personal data may be included in such large-scale leaks?
