A newly launched dark web marketplace claims to possess more than 153 million digital scans of driver’s licenses belonging primarily to people in the United States and Canada, raising fears of identity theft on an unprecedented scale.
According to well-know security blog krebsonsecurity.com, the illicit platform, called Nexus, also advertised more than 10 million identification cards, three million travel or international identity documents, and approximately 579,000 medical cards. The operators claimed the documents came from an ongoing breach of a major identity-verification company.
The FBI’s New Orleans field office has reportedly opened an investigation on September 1 into an apparent breach involving a Louisiana-based company, IDScan.net, that supplies identity-scanning and verification technology to businesses.
The company said it was investigating reports that information may have been exposed and was coordinating with law enforcement and outside cybersecurity specialists.
Dark Web Records Linked to Travel and Car Rentals
Investigative cybersecurity journalist Brian Krebs first reported the alleged breach after discovering that his own Virginia driver’s license had been presented as a sample on a Russian-language cybercrime forum.
Krebs found that his Nexus record included images of both sides of the license, along with infrared and ultraviolet scans. The files carried a timestamp corresponding to a trip he made in June 2025 when he had also rented a car.
IDScan.net says its technology conducts more than 21 million identity verifications each month across over 20,000 locations worldwide. Its services are used in industries including hospitality, car rentals, retail, financial services, and cannabis sales.
High-Profile US Officials Included in the Record Sale
The records reportedly included the driver’s license of US Defense Secretary Pete Hegseth and identification belonging to other senior government officials.
Nexus claimed it had been continuously extracting information for more than a year.
The marketplace disappeared from the dark web shortly after the initial report was published, displaying a message that the service was no longer available. It remains unclear whether it was voluntarily closed, disabled by its operators, or moved elsewhere.
Why Scanned Identity Documents Pose a Serious Risk for Fraud
Unlike passwords, details appearing on government-issued identification cannot be easily changed. Driver’s licenses may contain a person’s photograph, address, date of birth, signature, document number, and other identifying information.
High-quality scans can potentially be used to support fraudulent credit applications, impersonation attempts, social-engineering attacks, account-recovery scams, and efforts to bypass weak identity checks.
The incident also highlights concerns about the expanding use of third-party identity-verification systems. Consumers are increasingly asked to scan identification documents when renting cars, checking into hotels, entering age-restricted businesses, or accessing online services.
Each transaction can place sensitive information in the hands of companies, contractors, cloud providers, and verification platforms that consumers may not know are involved.
People who believe their information may have been exposed should watch for unfamiliar financial accounts, unexpected credit inquiries, phishing messages, and suspicious account-recovery attempts. The US Federal Trade Commission recommends that concerned consumers consider placing a free credit freeze with Equifax, Experian, and TransUnion, making it harder for criminals to open new credit accounts in their name.
See all the latest news from Greece and the world at Greekreporter.com. Contact our newsroom to report an update or send your story, photos and videos. Follow GR on Google News and subscribe here to our daily email!
