Digital scans of over 153 million driver's licenses have appeared on the dark web, potentially exposing sensitive identity data. The FBI is investigating a possible breach involving an ID verification service based in Louisiana.
The leaked dataset contains high-resolution scans of driver's licenses, according to reports from security researchers monitoring dark web activity. The scope of the breach—affecting over 153 million individuals—makes it one of the largest identity document leaks on record.
Investigators are currently examining whether the breach originated from an ID verification service operating in Louisiana. Such services typically handle digital identity checks for financial institutions, government agencies, and other organizations requiring document verification. The company's identity has not yet been publicly confirmed.
The FBI's involvement signals the severity of the incident. Driver's license scans contain multiple sensitive data points including names, addresses, dates of birth, and identification numbers—all valuable information for identity theft, fraud, and social engineering attacks.
The dark web listing has raised immediate concerns among security experts about downstream risks. Bad actors could use the data for creating fraudulent documents, opening accounts in victims' names, or conducting targeted phishing campaigns.
No statement has been released regarding notification procedures for affected individuals. The investigation remains ongoing, with federal authorities working to determine how the data was accessed and when the breach occurred.
This incident underscores persistent vulnerabilities in identity verification infrastructure. Major breaches of personal documents have surfaced repeatedly in recent years, highlighting the challenges organizations face in securing sensitive data at scale.
Individuals concerned about their information should monitor credit reports and consider placing fraud alerts with credit bureaus. Further details are expected as the FBI investigation progresses.
Norway is considering regulatory measures against camera-enabled wearable headsets, citing serious privacy concerns. The Nordic country aims to address risks posed by devices capable of covert recording.
Dropbox is notifying users of unauthorized account access resulting from an email verification vulnerability in Lenovo's identity system. Attackers exploited the flaw to create fraudulent Lenovo IDs and gain entry to Dropbox accounts.
A California federal grand jury has indicted a Russian national for orchestrating a phishing campaign that infected thousands of freelancers with TVRAT and DarkVNC malware.
The FBI is investigating a newly launched dark web service called Nexus that claims to possess digital scans of over 153 million driver's licenses from US and Canadian residents. The service is actively selling the stolen identification data.