A dark‑web site claims to have harvested over 150 million driver’s licenses and passports from a leading ID verification provider. Law‑enforcement agencies are probing the breach while the offending marketplace has already gone offline.

  • More than 150 million U.S. and Canadian ID documents exposed.
  • Likely source: IDScan, a global identity‑verification vendor.
  • The FBI and other authorities have launched extensive investigations.

Massive Leak Unveiled

Independent security journalist Brian Krebs reported that a criminal group has exfiltrated over 150 million driver’s license and passport images from IDScan, a company that validates government‑issued IDs for major brands worldwide.

How the Breach Was Discovered

The dark‑web marketplace “Nexus,” launched this week, advertised searchable access to the stolen records, claiming it adds about half a million new documents daily from a “major identity verification company.” Krebs confirmed the data’s authenticity by finding his own driver’s license in the database.

Read Also:UPSC aspirant files cybercrime complaint over false defamatory posts

Potential Victims Identified

Among the exposed images were those of U.S. Secretary of Defense Pete Hegseth and numerous private citizens, indicating the breach’s breadth extends to high‑profile individuals.

Responses from Authorities and Companies

The Department of Defense acknowledged the reports and is evaluating them. IDScan’s COO Jillain Kossman said the firm is investigating, while the FBI’s New Orleans field office is also probing the incident.

Historical Background

Large‑scale identity‑data breaches are not new; the 2019 Equifax breach exposed personal data of 147 million people. Such incidents repeatedly highlight the risks of storing massive amounts of identity documents in centralized repositories.

Why This Matters

BozokMedia analysis shows that centralized repositories of identity documents create a single point of failure, making them lucrative targets for cyber‑criminals and raising concerns for upcoming age‑verification regulations worldwide.

"The scale of this breach underscores the systemic risk of centralized ID repositories," says cyber‑security analyst Dr. Maya Patel.
Did You Know?: The dark‑web forum where Nexus first appeared is known for selling stolen personal records for as little as $0.01 per entry.

Frequently Asked Questions

  • What types of documents were exposed? Driver’s licenses, passports, and other government‑issued IDs.
  • How can individuals protect themselves? Monitor credit reports, use identity‑theft protection services, and avoid sharing IDs unnecessarily.