The FBI is officially investigating a massive cyber heist. Scans of more than 150 million driver’s licenses were recently offered for sale on the dark web. The stolen cache targets motorists across the United States and Canada. Federal officials have not yet disclosed the full number of affected citizens. It represents one of the largest digital identity leaks in North American history.
Cybersecurity journalist Brian Krebs first uncovered the illicit operation. He discovered an illicit site called Nexus advertised on a Russian cybercrime forum. The operators bragged that they had siphoned records continuously for over a year. In addition to driver’s licenses, the hoard contained ten million ID cards and three million passports. The site even offered Krebs’ own Virginia driver’s license as a free sample. Krebs contacted nine other individuals, and all confirmed their records were genuine.
This breach goes far beyond simple text lists of names and license numbers. The database contained high-resolution images of the front and back of each card. Many records also preserved infrared and ultraviolet scans collected during verification. Security systems rely heavily on these exact optical markers to confirm authenticity. Armed with this data, bad actors can easily trick automated identity checks.
The FBI New Orleans Field Office is spearheading the federal probe. Federal investigators are examining whether the data originated from Louisiana-based software vendor IDScan.net. Many airports, car rental firms, and retailers rely on the company’s scanning equipment. Several victims noted their timestamps matched visits to car rental desks or dispensaries. IDScan.net confirmed that an internal inquiry is underway.
Cybersecurity researchers warn this breach creates unprecedented national security and privacy hazards. Unlike a stolen credit card or leaked password, you cannot easily change your driver’s license. Your birth date, physical address, photo, and signature remain tied to you for life. Fraudsters can leverage these verified scans to open bank accounts and take out fraudulent loans. Criminals may also use genuine credentials to infiltrate corporate systems and redirect payroll funds.
The Nexus storefront disappeared from the dark web shortly after the reports broke. However, experts fear illicit buyers already archived massive portions of the records. Federal authorities urge consumers to stay vigilant against phishing attempts and unexpected credit inquiries. Freezing your credit reports with major bureaus provides an essential layer of defense right now. Monitoring financial accounts and enabling multifactor authentication can help keep your identity secure.
Sources
- KrebsOnSecurity: https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
- Quartz: https://qz.com/fbi-investigation-driver-license-breach-idscan-090826
- ConsumerAffairs: https://www.consumeraffairs.com/news/fbi-investigates-massive-breach-exposing-153-million-drivers-licenses-090826.html
- WWL-TV: https://www.wwltv.com/article/tech/150m-drivers-licenses-may-be-on-dark-web-questions-surround-new-orleans-cyber-firm/289-890012c2-9227-472c-b470-f7d16565d222
- Security Magazine: https://www.securitymagazine.com/articles/102554-150m-drivers-licenses-exposed-security-experts-discuss
Disclaimer
Artificial Intelligence Disclosure & Legal Disclaimer
AI Content Policy.
To provide our readers with timely and comprehensive coverage, South Florida Reporter uses artificial intelligence (AI) to assist in producing certain articles and visual content.
Articles: AI may be used to assist in research, structural drafting, or data analysis. All AI-assisted text is reviewed and edited by our team to ensure accuracy and adherence to our editorial standards.
Images: Any imagery generated or significantly altered by AI is clearly marked with a disclaimer or watermark to distinguish it from traditional photography or editorial illustrations.
General Disclaimer
The information contained in South Florida Reporter is for general information purposes only.
South Florida Reporter assumes no responsibility for errors or omissions in the contents of the Service. In no event shall South Florida Reporter be liable for any special, direct, indirect, consequential, or incidental damages or any damages whatsoever, whether in an action of contract, negligence or other tort, arising out of or in connection with the use of the Service or the contents of the Service.
The Company reserves the right to make additions, deletions, or modifications to the contents of the Service at any time without prior notice. The Company does not warrant that the Service is free of viruses or other harmful components.
