TLDR
A dark web marketplace called Nexus is selling digital scans of more than 153 million US and Canadian drivers licenses, reportedly siphoned from a major identity verification company used by Fortune 500 brands. Investigators say the...
How it works
A dark web marketplace called Nexus is selling digital scans of more than 153 million US and Canadian drivers licenses, reportedly siphoned from a major identity verification company used by Fortune 500 brands. Investigators say the...
Red flags
- A service on the Russian cybercrime forum Exploit offering bulk drivers license scans with photos for free previews and per record purchase. Data shows timestamped image captures matching real travel/ID check events, suggesting a compromised KYC vendor rather than a single website breach. Records span 170M+ people across US and Canada, including government and military IDs, indicating systemic exfiltration over more than a year
What to do
- 1Assume any ID you have shown to a US/Canadian merchant, airport or online age verification tool in the past two years may be exposed. Place a f
Source
krebs
Source reviewed by Mythos Forensic Team
https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/FAQ
Is FBI investigates dark web service selling 153M drivers licenses stolen from ID verification firm a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
A service on the Russian cybercrime forum Exploit offering bulk drivers license scans with photos for free previews and per record purchase. Data shows timestamped image captures matching real travel/ID check events, suggesting a compromised KYC vendor rather than a single website breach. Records span 170M+ people across US and Canada, including government and military IDs, indicating systemic exfiltration over more than a year
What should I do first?
Assume any ID you have shown to a US/Canadian merchant, airport or online age verification tool in the past two years may be exposed. Place a f
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.