Dark Web Identity Theft Service Exposes 153 Million Drivers Licenses in Massive Breach A newly launched dark web service, Nexus, is selling digital scans of over 153 million drivers licenses from the U.S. and Canada, along with 10 million ID cards, 3 million travel documents, and 579,000 medical cards. The breach, first reported on August 31, appears to stem from a Louisiana-based identity verification company, idscan.net, which processes IDs for major corporations, including Hertz, Target, FedEx, and Caesars Entertainment. Investigations by KrebsOnSecurity revealed that the stolen data includes high-resolution scans of licenses some with infrared and ultraviolet imaging alongside timestamps matching when victims rented cars, visited dispensaries, or passed through security checkpoints. Multiple individuals whose licenses were found in the database confirmed they had shared their IDs with Hertz or marijuana dispensaries around the recorded dates, suggesting idscan.net as the likely source. The service, advertised on the Russian cybercrime forum Exploit, claims to have been exfiltrating data for over a year, with records continuously updated nearly 400,000 new licenses were added in just 24 hours. The FBI’s New Orleans field office has launched an official inquiry into the breach, following reports that the service also listed the assistant director of the FBI’s license among its offerings. Security researchers warn the breach poses severe risks, including identity theft for financial fraud, stalking, and threats to protected individuals such as those in witness protection or fleeing domestic violence. The exposed data could enable AI-powered facial recognition to track victims even if they alter their appearance. idscan.net, which processes 21 million verifications monthly across 20,000 global locations, acknowledged the investigation but has not provided further details. Shortly after the story broke, the Nexus website was taken offline, though the full scope of the breach remains unclear. Updates will follow as the investigation progresses.

FedEx Group Health Plan Reports Data Breach Affecting Over 1,000 Individuals On December 1, 2025, FedEx Corporation Group Health Plan disclosed a cybersecurity incident that exposed the personally identifiable information (PII) and protected health information (PHI) of at least 1,066 individuals across the U.S. The breach impacted active and former employees enrolled in the company’s medical, dental, vision, and COBRA continuation coverage plans. The compromised data may include names, contact details, Social Security numbers, medical plan information, health claims, and dependent records. While FedEx has not released specifics on the breach’s method or timeline, it confirmed the incident to the U.S. Department of Health and Human Services on the same day. In response, FedEx has notified federal authorities and is expected to contact affected individuals directly. Though the company has not detailed its mitigation efforts, similar breaches often involve credit monitoring or identity protection services for impacted parties. The exposure of both PII and PHI raises concerns about potential fraud, including unauthorized medical billing or identity theft. Affected individuals are advised to monitor health insurance statements and credit reports for suspicious activity.