A newly launched dark web marketplace is selling digital scans of over 153 million driver's licenses from U.S. and Canadian residents. The FBI's New Orleans field office has opened an investigation into the breach, which appears to originate from a Louisiana-based identity verification company.
The identity theft service emerged this week with access to a massive trove of driver's license images. Interviews with affected individuals indicate the stolen data came from a widely-used identity verification platform operating out of Louisiana.
The scale of the breach is significant, encompassing credentials from both the United States and Canada. The dark web marketplace is actively selling access to these digital scans to unknown buyers, creating immediate risk for identity theft and fraud.
The FBI's New Orleans field office is now investigating the operation. KrebsOnSecurity first reported the discovery and has been tracking the service's activity.
Identity verification companies handle sensitive personal data as part of their core business function. Breaches of this nature expose individuals to numerous threats, including account takeovers, fraudulent loan applications, and criminal impersonation.
The incident highlights ongoing vulnerabilities in how companies store and protect biometric and identity documents. Users of the compromised identity verification service have been potentially exposed without their knowledge or consent.
No official statement from the affected Louisiana-based company has been released at this time. The FBI investigation is ongoing, and authorities have not yet announced any arrests or recovered stolen data.
Individuals concerned about whether their information is included in the breach should monitor credit reports, place fraud alerts with credit bureaus, and consider freezing their credit to prevent unauthorized account openings.
Five Venezuelan nationals have pleaded guilty to conducting ATM jackpotting attacks across the United States, using malware to extract cash from automated teller machines.
Hackers infiltrated thousands of Dropbox accounts last month, accessing and downloading user files stored on the cloud platform. The company confirmed the breach in a statement reviewed by Bloomberg News.
Threat actors are leveraging the legitimate Faronics Deploy endpoint-management platform to gain administrative control over targeted computers and install ScreenConnect remote support software.
X is investigating a surge of unsolicited password reset emails following the launch of its X Money payments service. The company believes the incidents may be connected to the new platform.