GoKawiil
Tech News
LinkedIn introduced tools letting members vouch for colleagues' or classmates' work history, distinct from endorsements, and gave companies new controls over who can associate with their brand on the platform. The company said its existing verification tools have already confirmed 115 million users and over 700,000 companies.
A dark web marketplace called Nexus was found selling access to a database containing roughly 153 million U.S. and Canadian driver's licenses and 3 million travel documents, according to Krebs on Security. The breach appears linked to identity verification firm IDScan, which is now investigating, while the FBI has also opened a probe; the Nexus listing vanished from the dark web after the report but its operators have not claimed to have deleted the stolen data.
ID verification company IDScan disclosed that hackers accessed its systems without authorization, a breach later linked to a criminal marketplace called Nexus selling scans of over 170 million identity documents. Security researcher Brian Krebs verified the stolen trove includes 153 million driver's licenses, 10 million ID cards, 3 million passports and travel documents, and hundreds of thousands of medical cards, mostly belonging to US residents with some Canadian records included. The attackers claimed to have quietly siphoned data from IDScan's systems for more than a year before being detected.
Identity verification firm IDScan has acknowledged that hackers accessed customer data stored on its IDScan.net cloud platform, days after reports tied the company to a leaked database of over 153 million driver's license scans being sold on the dark web. The company said it discovered the unauthorized access around September 1 and is still investigating the scope, but confirmed exposed data can include names and government ID numbers.
A dark web marketplace called Nexus was offering digital scans of over 153 million driver's licenses from the US and Canada, along with 10 million ID cards, 3 million travel documents and half a million medical cards, affecting roughly 170 million people. Journalist Brian Krebs traced the data to a Louisiana-based ID verification firm and found the license of Defense Secretary Pete Hegseth among the leaked files. The FBI has opened an inquiry, and the Nexus service disappeared from the dark web the same day Krebs published his findings.
A dark-web marketplace called Nexus advertised more than 153 million US and Canadian driver's license images, along with millions of ID cards, travel documents and medical cards, before going offline after Krebs on Security exposed it. The listings included not just standard front-and-back scans but infrared and ultraviolet images normally used by businesses to verify document authenticity. The FBI's New Orleans office is reportedly investigating a possible breach at Louisiana-based identity-verification firm IDScan.net, which Nexus claimed as its data source.
A trove of roughly 153 million scanned driver's licenses, reportedly stolen from an identity verification company, has surfaced for sale online. The leak underscores how centralized repositories of scanned IDs, built to confirm users' identities, have themselves become prime targets for hackers.
A dark web marketplace called Nexus emerged this week claiming to sell searchable access to over 150 million U.S. and Canadian driver's licenses and passports, with roughly half a million new records added daily. Security journalist Brian Krebs and researcher Zach Edwards traced the likely source to IDScan, a Louisiana-based identity verification firm used by major consumer brands to check tens of millions of IDs monthly. Both researchers confirmed their own personal documents appeared in the database, and Defense Secretary Pete Hegseth's photo was also reportedly found among the listings.
Cybercriminals are selling digital scans of over 153 million U.S. and Canadian driver's licenses, along with medical and residence cards, through a new dark web service called Nexus. The FBI's New Orleans office has opened an inquiry after security researcher Krebs on Security verified the data's authenticity, including his own license. The breach reportedly stems from a Louisiana-based identity verification company whose clients include Hertz, Target, FedEx, and Caesars Entertainment.
A joint alert from the US State Department, Japan, Canada and the UK warns that North Korean operatives are using falsified identity documents to get hired as remote IT workers at foreign companies, letting them enter corporate networks with legitimate-looking access. Separately, groups like Scattered Spider have used social engineering against help desks to trick staff into resetting passwords or MFA for accounts they don't own, bypassing strong authentication entirely.