FBI Probe Driver License Breach Exposes 153 Million Records on Dark Web

FBI probe driver license breach

A new dark‑web marketplace dubbed Nexus is offering digital scans of ↓ 153 million driver’s licenses from the United States and Canada. The service claims to pull data from a “major identity verification company” based in Louisiana, prompting the New Orleans FBI field office to open a formal investigation. Researchers who bought sample records confirmed that each file includes front and back images, infrared and ultraviolet scans, and timestamps that match travel dates. Among the victims are senior U.S. officials, including Defense Secretary Pete Hegseth, and private citizens who rented cars from Hertz.

“The sheer scale of this breach is unprecedented,” said a senior FBI cyber‑division official.

The Nexus catalog lists over 10 million ID cards, 3 million travel documents, and half‑a‑million medical cards. A blank query returns roughly 11.5 million pages, about 15 results per page, confirming the magnitude of the leak.

How the data may have been harvested

Interviews with affected individuals suggest the breach originates from idscan.net, a provider that verifies IDs for retailers, rental agencies, and cannabis dispensaries. The company’s own documentation states it scans IDs with infrared and ultraviolet light, processing more than 21 million verifications monthly. Reuters reported similar breaches at identity‑verification firms last year. AP News noted that law‑enforcement agencies are tightening oversight of third‑party ID scanners. The FBI’s New Orleans office confirmed the probe is ongoing and that the breach could affect any entity that relied on the compromised verification platform. Experts warn that as more services demand driver’s licenses for access, the attack surface widens, putting vulnerable populations—such as domestic‑violence survivors and witnesses in protection programs—at heightened risk.

Analysis by Kaelen Frost (Lead Cybersecurity Analyst).