Key facts
- A suspected massive data breach may have compromised over 150 million driver's licenses and passports.
- An identity theft site called Nexus claimed to offer access to these stolen documents.
- Researchers identified IDScan, a major identity verification company, as the likely source of the breach.
- The FBI is investigating the incident.
- The breach comes amid increased government rollout of age verification laws.
A suspected massive data breach may have compromised the personal information of over 150 million individuals, with driver's licenses and passports reportedly stolen. The breach was detailed in a report by independent security journalist Brian Krebs, who noted the emergence of an identity theft site named Nexus on the dark web.
Nexus claimed to provide access to more than 150 million government-issued identity documents from the United States and Canada, adding approximately half a million new documents daily. The site's advertisement suggested near real-time access to the compromised systems of a major identity verification company. Krebs confirmed the authenticity of some records, including his own driver's license, by searching the database.
Working with security researcher Zach Edwards, Krebs identified IDScan, a Louisiana-based company that verifies millions of IDs monthly for major brands, as the likely source of the compromised data. While IDScan's Chief Operating Officer Jillain Kossman confirmed the company is investigating, the Chief Executive Jimmy Roussel did not comment. The FBI's New Orleans field office is also reportedly probing the incident. Nexus ceased operations shortly after Krebs' report was published.
This incident occurs as governments increasingly implement age verification laws that require users to upload identity documents. Security experts have long warned about the risks associated with companies storing large volumes of sensitive identity information, highlighting the potential for theft by hackers. This breach is considered one of the largest known single breaches of identity documents in recent times.