Vendor

KrebsOnSecurity

0 mentions in 7 days · 1 in 30 days · 2 total · first seen Aug 14, 2026 · last 14d ago

Timeline2 articles

FBI Probes Service Selling 153M+ Drivers Licenses

Dark web service Nexus sells scans of 153M+ US and Canadian drivers licenses, apparently siphoned from a breached identity verification company; FBI opened an inquiry.

A new dark web identity theft service called Nexus, advertised on the Exploit forum, offers scans of more than 153 million drivers licenses from the US and Canada, plus over 10 million ID cards and millions of travel and medical documents. The data appears to come from an ongoing breach at a major Louisiana-based identity verification company, with records growing by roughly 400,000 in 24 hours. Records include high-ranking US officials such as Defense Secretary Pete Hegseth, and timestamps suggest data was captured during car rentals and travel. The FBI's New Orleans field office has launched an official inquiry into the source of the images.

Krebs on SecuritySep 1, 22:40 UTC · 14d agoData breach in the wild

Who’s Tracking You? Use This New Service to Find Out

KrebsOnSecurity covers DecryptAds, a free service that scrapes and correlates adtech data to reveal which entities track users across sites and apps.

KrebsOnSecurity wrote about DecryptAds, a free service that scrapes and correlates adtech data. The service makes it simple to identify which entities are responsible for ads shown on websites and data harvested by mobile apps, information that is semi-public but traditionally walled away inside large advertising platforms. No security incident is involved; the piece is an introduction to a privacy-research tool.

Krebs on SecurityAug 14, 11:24 UTC · Aug 14, 2026Tools

Appears with

organization Exploit forum 1 organization FBI 1 organization KrebsOnSecurity 1 product DecryptAds 1 vendor Hertz 1 vendor Nexus 1 victim Canada 1 victim Pete Hegseth 1 victim Troy Hunt 1 victim US 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.