Major ID Verification Service Suspected of Data Breach Exposing Millions of Identity Documents
A suspected major data breach has exposed over 150 million identity documents, including driver’s licenses and passports from the United States and Canada. According to security journalist Brian Krebs, a dark web site called Nexus is offering access to these records, with new entries added daily from what appears to be real-time exfiltration of data from an unnamed major ID verification company likely identified as Louisiana-based IDScan. ID documents belonging to individuals such as Secretary of Defense Pete Hegseth and Krebs himself were found in the database. The breach has prompted investigations by both IDScan’s leadership and the FBI's New Orleans field office. This incident highlights growing concerns around age verification laws that require users to upload sensitive identity data, which experts warn increases exposure risks. The breach is considered one of the largest known thefts of personal identification documents in recent years, raising significant cybersecurity and privacy issues for individuals and companies relying on such services.
Topics: cybercrime dark_web data_breaches identity_verification