Tech News
← Home  ·  All topics

Identity Verification

12 GoKawiil briefs on this topic

Apple Cash to Require Identity Verification and Enable External Funding

Apple has announced updates to its Apple Cash service, including a new requirement for users to verify their identity starting November 9 to reload their balance. Additionally, Green Dot Bank may soon introduce a feature allowing direct transfers from bank accounts or merchants to Apple Cash, though no specific date has been set. Changes to the arbitration section of the terms are also noted, prompting users to review the updated policies.

FBI warns North Korean operatives exploit weak identity checks in hiring and onboarding

The FBI has repeatedly flagged that North Korean IT workers are using fraudulent or stolen identity documents, proxy infrastructure and US-based facilitators to pass remote hiring processes and gain access to corporate networks. Rather than stealing existing credentials, these attackers get organizations to create new credentials for them during onboarding, exploiting the fact that Zero Trust and MFA controls assume an identity already exists. The FBI now recommends verifying identity both during hiring and continuously throughout remote employment.

LinkedIn launches vouching feature and new brand controls to curb fake profiles

LinkedIn introduced tools letting members vouch for colleagues' or classmates' work history, distinct from endorsements, and gave companies new controls over who can associate with their brand on the platform. The company said its existing verification tools have already confirmed 115 million users and over 700,000 companies.

Dark web service Nexus exposed 153 million US and Canadian driver's licenses

A dark web marketplace called Nexus was found selling access to a database containing roughly 153 million U.S. and Canadian driver's licenses and 3 million travel documents, according to Krebs on Security. The breach appears linked to identity verification firm IDScan, which is now investigating, while the FBI has also opened a probe; the Nexus listing vanished from the dark web after the report but its operators have not claimed to have deleted the stolen data.

IDScan breach exposes 153 million driver's licenses, hackers ran year-long data theft via Nexus

ID verification company IDScan disclosed that hackers accessed its systems without authorization, a breach later linked to a criminal marketplace called Nexus selling scans of over 170 million identity documents. Security researcher Brian Krebs verified the stolen trove includes 153 million driver's licenses, 10 million ID cards, 3 million passports and travel documents, and hundreds of thousands of medical cards, mostly belonging to US residents with some Canadian records included. The attackers claimed to have quietly siphoned data from IDScan's systems for more than a year before being detected.

IDScan confirms cloud breach exposing 153 million driver's license records

Identity verification firm IDScan has acknowledged that hackers accessed customer data stored on its IDScan.net cloud platform, days after reports tied the company to a leaked database of over 153 million driver's license scans being sold on the dark web. The company said it discovered the unauthorized access around September 1 and is still investigating the scope, but confirmed exposed data can include names and government ID numbers.

Dark web service sold scans of 153 million US and Canadian drivers licenses

A dark web marketplace called Nexus was offering digital scans of over 153 million driver's licenses from the US and Canada, along with 10 million ID cards, 3 million travel documents and half a million medical cards, affecting roughly 170 million people. Journalist Brian Krebs traced the data to a Louisiana-based ID verification firm and found the license of Defense Secretary Pete Hegseth among the leaked files. The FBI has opened an inquiry, and the Nexus service disappeared from the dark web the same day Krebs published his findings.

Dark-web market Nexus offered 153 million driver's license scans tied to IDScan.net breach

A dark-web marketplace called Nexus advertised more than 153 million US and Canadian driver's license images, along with millions of ID cards, travel documents and medical cards, before going offline after Krebs on Security exposed it. The listings included not just standard front-and-back scans but infrared and ultraviolet images normally used by businesses to verify document authenticity. The FBI's New Orleans office is reportedly investigating a possible breach at Louisiana-based identity-verification firm IDScan.net, which Nexus claimed as its data source.

Breach Exposes 153 Million Driver's License Scans From Identity Verification Firm

A trove of roughly 153 million scanned driver's licenses, reportedly stolen from an identity verification company, has surfaced for sale online. The leak underscores how centralized repositories of scanned IDs, built to confirm users' identities, have themselves become prime targets for hackers.

IDScan suspected of massive breach exposing 150 million US and Canadian IDs

A dark web marketplace called Nexus emerged this week claiming to sell searchable access to over 150 million U.S. and Canadian driver's licenses and passports, with roughly half a million new records added daily. Security journalist Brian Krebs and researcher Zach Edwards traced the likely source to IDScan, a Louisiana-based identity verification firm used by major consumer brands to check tens of millions of IDs monthly. Both researchers confirmed their own personal documents appeared in the database, and Defense Secretary Pete Hegseth's photo was also reportedly found among the listings.

FBI probes dark web sale of 153 million stolen driver's license scans

Cybercriminals are selling digital scans of over 153 million U.S. and Canadian driver's licenses, along with medical and residence cards, through a new dark web service called Nexus. The FBI's New Orleans office has opened an inquiry after security researcher Krebs on Security verified the data's authenticity, including his own license. The breach reportedly stems from a Louisiana-based identity verification company whose clients include Hertz, Target, FedEx, and Caesars Entertainment.

Identity Verification Gaps at Hiring and Account Recovery Emerge as Major Attack Vector

A joint alert from the US State Department, Japan, Canada and the UK warns that North Korean operatives are using falsified identity documents to get hired as remote IT workers at foreign companies, letting them enter corporate networks with legitimate-looking access. Separately, groups like Scattered Spider have used social engineering against help desks to trick staff into resetting passwords or MFA for accounts they don't own, bypassing strong authentication entirely.