The FBI is investigating a newly launched dark web service called Nexus that claims to possess digital scans of over 153 million driver's licenses from US and Canadian residents. The service is actively selling the stolen identification data.
A dark web marketplace named Nexus emerged this week offering digital scans of driver's licenses belonging to more than 153 million people across the United States and Canada. The service represents a significant data breach affecting a substantial portion of North America's population.
According to security researcher Brian Krebs, who first reported the discovery, Nexus is operating as a dedicated identity theft platform. The service's operators are selling access to the stolen license data, creating immediate risk for affected individuals.
The scale of the breach is substantial. With 153 million licenses potentially compromised, the data covers a significant percentage of drivers in both countries. Driver's licenses contain sensitive personal information including names, addresses, dates of birth, and identification numbers—all critical data points for identity theft and fraud.
The FBI has launched an investigation into the service, though details about the source of the data remain unclear. Authorities have not yet confirmed whether the data was obtained through a single major breach or compiled from multiple sources over time.
This development adds to growing concerns about identity theft services operating on dark web marketplaces. Such platforms typically operate with minimal oversight, making them attractive venues for criminals seeking to buy and sell stolen personal information.
The discovery underscores ongoing vulnerabilities in how personal identification data is stored and protected. Individuals potentially affected should monitor their credit reports and consider placing fraud alerts with credit bureaus. Both US and Canadian authorities typically recommend residents review their financial accounts regularly for suspicious activity.
Further details about the investigation and confirmation of the data's authenticity are expected as authorities examine the Nexus marketplace more closely.
A California federal grand jury has indicted a Russian national for orchestrating a phishing campaign that infected thousands of freelancers with TVRAT and DarkVNC malware.
International law enforcement agencies and private sector partners have seized infrastructure belonging to the Sality malware botnet, a peer-to-peer network used for unauthorized computer access and data theft.
SonicWall has warned customers of two new zero-day vulnerabilities in its SMA1000 appliances being chained together in active remote code execution attacks.
A newly launched dark web marketplace is selling digital scans of over 153 million driver's licenses from U.S. and Canadian residents. The FBI's New Orleans field office has opened an investigation into the breach, which appears to originate from a Louisiana-based identity verification company.