Tech news in 3 minutes
Hackers Breach Major ID Card Verification Service
A massive data breach has exposed over 150 million driver’s licenses and passports from the identity verification service IDScan, with the stolen documents now searchable on a dark web site called Nexus, according to a report by security journalist Brian Krebs. This SEO-focused news summary targets readers searching for data breach, identity theft, cybersecurity, and ID verification security news. Krebs reported that Nexus, launched this week on the dark web, allows users to search through more than 150 million U.S. and Canadian driver’s licenses and passports. A post on a Russian cybercrime forum claimed Nexus adds about half a million new documents daily, sourced from a “major identity verification company,” suggesting near real-time access to the company’s systems. Krebs confirmed his own driver’s license was in the database, validating the data’s authenticity. Secretary of Defense Pete Hegseth’s photo was also listed. The Department of Defense told TechCrunch it is “aware of these reports and is evaluating them.” Working with security researcher Zach Edwards, Krebs identified the likely source as IDScan, a Louisiana-based company used by major tech and consumer brands to verify tens of millions of IDs monthly. IDScan’s CEO did not comment, but COO Jillian Kossman told Krebs the company is investigating. Krebs said the FBI’s New Orleans field office is also probing the breach; the FBI did not respond to TechCrunch’s inquiry. Nexus went offline shortly after Krebs’ report. This breach comes as governments increasingly mandate age-verification laws requiring adults to upload identity documents. Security experts have long warned that storing vast amounts of identity data for extended periods puts it at risk of theft. By all accounts, this is the largest known single breach of identity documents in recent history.