FBI probes dark web leak of 153 million driver licenses tied to ID scanner

Key points

• FBI's New Orleans field office opened an official inquiry into the source of the leaked data.
• Nexus advertised over 153 million driver licenses, plus 10 million ID cards and 3 million travel documents.
• Krebs confirmed the authenticity of at least nine licenses, including those of government officials and security researchers.
• The data includes scans in infrared and ultraviolet spectrums, potentially allowing for counterfeit ID creation.
• IDScan.net, a Louisiana-based ID verification company, is under investigation as a potential source of the breach.

Background

This incident follows earlier reports in early September 2026 about the Nexus service appearing on the dark web. Previous coverage highlighted the rapid growth of the database, with hundreds of thousands of new records added within 24 hours, suggesting a continuous exfiltration of data over more than a year. The breach has prompted calls for stricter oversight of third-party ID verification vendors, as many major companies and government agencies rely on such services for identity checks.

How outlets are covering it

USA Today and The Independent reported the FBI's investigation and the scale of the breach, emphasizing the potential impact on millions of individuals. Krebs on Security provided detailed technical analysis, confirming the authenticity of the data and pointing to IDScan.net as a likely source. Ars Technica highlighted the real-time nature of the breach, with victims finding their licenses for sale within hours of renting a car. All outlets agree on the seriousness of the incident but differ in emphasis: USA Today and The Independent focus on the FBI's response, while Krebs and Ars Technica delve into the technical details and the role of third-party vendors.

Why it matters

This breach poses significant risks of identity theft and fraud, as driver licenses are commonly used to verify identity for financial and government services. The inclusion of infrared and ultraviolet scans could enable the creation of counterfeit IDs, complicating efforts to detect fraud. The incident also highlights the vulnerabilities in third-party ID verification systems, which are increasingly used by major corporations and government agencies, raising concerns about data security and privacy.

What to watch

The FBI's investigation is ongoing, and IDScan.net has stated it is examining the matter. The disappearance of the Nexus site may hinder efforts to assess the full scope of the breach. Individuals are advised to monitor their credit, report fraud to the FTC, and contact their DMV to address any compromised licenses. Further updates may emerge as the investigation progresses and more details about the source of the breach are uncovered.