Srsly Risky Biz: America's Drivers Licence Breach is a National Security Disaster
Dark web service Nexus sold 153 million US and Canadian driver's licenses, linked to identity verification firm IDScan under FBI investigation.
Krebs On Security reported that a dark web service called Nexus sold access to 153 million US and Canadian driver's licenses, claiming over a year of continuous exfiltration from a major identity verification company, with roughly 400,000 new licences added in a single day. Krebs verified the data as genuine and linked the incident via circumstantial evidence to identity verification firm IDScan, whose licences of senior US officials including Secretary of War Pete Hegseth appeared in the database; the FBI is investigating and IDScan has confirmed a breach inquiry. The article argues the data has national security implications, citing how Chinese APT espionage (Anthem, Equifax, Marriott, OPM) and Bellingcat investigations exploited leaked databases. Class action suits are being prepared, and the piece calls for stricter oversight of identity verification firms.
- Nexus added nearly 400,000 licences in one day, suggesting continuous ingestion
- Licences of senior US officials, including Pete Hegseth, appeared in the database
- Krebs linked the breach to identity verification firm IDScan via circumstantial evidence
- Stolen licences could feed adversary intelligence, echoing the OPM and Equifax breaches
- Class action suits filed; article urges FTC oversight of identity verification firms
From the original article
10 min read at news.risky.biz
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Amberleigh Jack. This week's edition is sponsored by Authentik. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher or subscribing via
By Tom Uren · news.risky.biz
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.