GoKawiilSign up to see the future, today Can’t-miss innovations from the bleeding edge of science and tech Email address Sign Up Thank you!
The digital scans of more than 153 million drivers licenses of individuals from the United States and Canada are being sold on the dark web through an easily accessible service called Nexus.
As noted cybersecurity journalist Brian Krebs noted on his blog this week, the sale has now caught the attention of the FBI, which has launched an official inquiry.
On the same day Krebs published his post, the service mysteriously vanished from the dark web, which could make tracking down the people behind the hack more difficult.
Nonetheless, the scale of the leak is staggering, and includes not just drivers licenses, but 10 million ID cards, over three million travel documents, and over half a million medical cards as well, representing over 170 million individuals total. That’s pushing half of the United States’ and Canada’s combined populations.
The ID scans appear to have been taken from a widely-used ID verification company based out of Louisiana and even include the license of US defense secretary Pete Hegseth.
The incident highlights the dangers of having little regulatory oversight over identity verification services — a thorny subject, considering regulators continue to push for age limits for content online, rules that could put people at risk of having their identity stolen by bad agents.
The ID scans first appeared on a Russian cybercrime forum. The owner of the files caught Krebs’ attention after showing the journalist a scan of his Virginia drivers license, strongly supporting the leak’s validity.
Before it was taken down, the shadowy dark web service called Nexus allowed virtually anybody to peruse identity documents of over 170 million people in the US and Canada.
“We have been continuously exfiltrating new data for over a year into our private database,” the service boasted in a post on the Russian forum. “Records are available to preview before purchase with pertinent information redacted. Customer photos are displayed if available.”
... continue reading