FBI Investigates Dark Web Service Selling 153M+ Driver's Licenses
Nexus service offers millions of identity documents for sale.
1Identity Document Sales on the Dark Web
A dark web service called Nexus claims to be selling scans of over 153 million driver's licenses from the U.S. and Canada. The service also offers millions of identity cards, travel documents, and medical cards. According to KrebsOnSecurity, these documents may have been leaked from a Louisiana-based identity verification company. The FBI has launched an investigation through its New Orleans field office.
2Service Scope and Claims
Nexus claims to provide access to identity documents of over 170 million North Americans. The service initially offered a Virginia driver's license as a free sample. In addition to 153 million licenses, it offers 10 million ID cards, 3 million travel documents, and 579,000 medical cards. The service alleges that data has been exfiltrated for over a year.
3Data Source and Leak
Nexus claims the data comes from an active breach at a 'major identity verification company' whose clients include Fortune 500 companies. The service states that data can be previewed and customer photos displayed if available. In the last 24 hours, nearly 400,000 new license records were added to the service.
4Connection to Identity Verification Company
KrebsOnSecurity attempted to trace the source by comparing timestamps on stolen license images. Businesses like Hertz rental counters and Planet13 dispensary use identity verification services from Louisiana-based idscan.net. This technology scans IDs using infrared and ultraviolet light.
5FBI Intervention
Following the publication of the story, Nexus's dark web site suddenly disappeared. The login page was replaced with a message stating, 'This service is no longer available.' As the FBI's investigation continues, the identities of those behind the service remain unknown. The number of identity theft victims continues to rise.
6Security Vulnerabilities in Identity Verification Industry
This incident highlights security vulnerabilities in the identity verification industry. The leak of data from a company serving Fortune 500 clients raises questions about the industry's reliability. Companies like idscan.net need to review their security measures.
7Victims' Situation
Individuals whose licenses were listed on Nexus face identity theft risks. KrebsOnSecurity confirmed the authenticity of some documents by interviewing victims. Victims are seeking answers about how their identities were leaked. Identity theft can lead to financial losses and long-term legal issues.
8Conclusion and Warnings
The Nexus case demonstrates how organized dark web identity theft operations can be. Stronger measures are needed to protect individuals' identity information. The FBI's investigation is crucial to stopping such services. Users must be more cautious in identity verification processes.
Original article: Slashdot — FBI, 153 Milyon Ehliyet Satışı Yapan Karanlık Ağ Servisini Soruşturuyor