KrebsOnSecurity uncovered a new dark web service called Nexus offering more than 153 million driver's licenses and other government IDs for sale, including infrared and ultraviolet scans that could help forge counterfeit cards capable of passing hologram checks. The reporter found his own license, along with those of his mother, an FBI assistant director, and several security researchers, all apparently sourced from rental car and dispensary transactions.
arstechnica.com
· 2026-09-02
A dark web marketplace called Nexus emerged this week claiming to sell searchable access to over 150 million U.S. and Canadian driver's licenses and passports, with roughly half a million new records added daily. Security journalist Brian Krebs and researcher Zach Edwards traced the likely source to IDScan, a Louisiana-based identity verification firm used by major consumer brands to check tens of millions of IDs monthly. Both researchers confirmed their own personal documents appeared in the database, and Defense Secretary Pete Hegseth's photo was also reportedly found among the listings.
techcrunch.com
· 2026-09-02
Cybersecurity journalist Brian Krebs discovered a dark web service called Nexus selling over 153 million scanned driver's licenses, medical cards and other ID documents from the US and Canada. Krebs traced the likely source to a breach at Louisiana-based verification firm IDScan, whose clients include Hertz, Target, FedEx and Motorola, and even found his own license used as a sample to advertise the stolen trove, alongside Defense Secretary Pete Hegseth's ID.
engadget.com
· 2026-09-02
Cybercriminals are selling digital scans of over 153 million U.S. and Canadian driver's licenses, along with medical and residence cards, through a new dark web service called Nexus. The FBI's New Orleans office has opened an inquiry after security researcher Krebs on Security verified the data's authenticity, including his own license. The breach reportedly stems from a Louisiana-based identity verification company whose clients include Hertz, Target, FedEx, and Caesars Entertainment.
9to5mac.com
· 2026-09-02
ShinyHunters, an extortion group, published roughly 50GB of stolen Carhartt data on the dark web after the apparel maker declined to pay a $3.3 million ransom demand. Have I Been Pwned founder Troy Hunt confirmed the leak stems from a breach of Carhartt's Databricks analytics platform, exposing 12.9 million accounts containing names, emails, phone numbers, and addresses, alongside employee and corporate records.
bleepingcomputer.com
· 2026-08-27
The ATF acknowledged that a standalone system separate from its main network was compromised, calling it a 'major incident' after the Qilin ransomware gang listed the agency on its dark web leak site. The agency said the affected system does not connect to its enterprise network or eForms platform, and is now working with the Department of Justice to investigate the breach.
bleepingcomputer.com
· 2026-08-27
GoKawiil