FBI Probes Service Selling 153M+ Drivers Licenses

307 points · 172 comments on HN · read original →

Points and comments are a snapshot, not live.

An identity theft service on the dark web is selling over 153 million driver's license scans, linked to a breach at idscan.net.

The Nexus service, advertised on the Russian forum Exploit, offers scans of 153M+ U.S. and Canadian driver's licenses, along with ID cards, travel documents, and medical cards. Timestamps on the images correspond to dates when victims rented cars from Hertz or visited venues like Planet13 dispensary. The FBI's New Orleans field office has opened an inquiry into an apparent breach at idscan.net, a Louisiana-based identity verification company that counts Hertz, Target, FedEx, and Caesars among its clients. The service has since gone offline, displaying a message that it is no longer available.

What commenters are saying

Commenters are alarmed at the scale of the breach, with one noting 153 million IDs represents roughly half of all U.S. adults. Several criticize identity verification companies for poor security and retaining data indefinitely. A top comment recommends locking credit and enabling SIM swap protection. Some contrast the U.S. approach unfavorably with Germany's NFC-chip national ID system. Others argue that negligence is already illegal but rarely prosecuted, and that GDPR-style regulations would treat personal data as a liability.