Massive Dark Web Breach Exposes Over 153 Million Driver’s License Scans A dark web marketplace, Nexus, has reportedly offered for sale digital scans of over 153 million U.S. and Canadian driver’s licenses, along with 10 million ID cards, 3 million travel documents, and hundreds of thousands of medical cards. The service, which claimed to obtain the data through a live breach at a major identity verification company, advertised searchable scans including front/back images and infrared/ultraviolet scans making them highly valuable for identity theft. Security researcher Brian Krebs confirmed the site’s existence after being alerted to it on a Russian cybercrime forum. His own driver’s license was offered as a free sample, and he verified at least nine leaked documents. The FBI has acknowledged investigating the incident but has not disclosed further details. The breach highlights growing risks as businesses increasingly rely on third-party identity verification providers, many of which retain sensitive biometric and ID data. Unlike passwords or credit card numbers, government-issued IDs cannot be easily replaced, amplifying the long-term threat. Experts warn that such data could fuel fraudulent credit applications, targeted phishing, and account takeovers for years. While Nexus has since gone offline, similar dark web services are expected to emerge. The incident follows other recent breaches, including: - A MOVEit file-transfer vulnerability exploited by the Clop ransomware group, exposing 6 million Louisiana driver’s license records. - A third-party vendor breach affecting 3 million hunting/fishing license customers, compromising driver’s licenses and passport numbers. The scale of the Nexus breach if verified would rank among the largest single leaks of government ID data, underscoring the vulnerabilities of centralized identity verification systems. Authorities continue to monitor dark web activity linked to the incident.