Major ID verification service reportedly hacked
Over 150 million driver's licenses and passports allegedly stolen
1Massive data breach occurred
According to security expert Brian Krebs, a major identity verification company's systems were compromised. Over 150 million driver's licenses and passports belonging to US and Canadian residents were stolen. A dark web site called Nexus published a searchable database of these documents. The data's authenticity was confirmed by Krebs finding his own driver's license in the list.
2Company identified
Researchers traced the breach to an identity verification service called IDScan. The Louisiana-based company serves major tech and consumer brands worldwide, verifying tens of millions of IDs monthly. IDScan's COO Jillian Kossman confirmed they're investigating the incident, while CEO Jimmy Roussel declined to comment.
3FBI launches investigation
The FBI's New Orleans field office has begun investigating the data breach, though officials didn't respond to TechCrunch's inquiries. The Nexus site went offline shortly after Krebs published his report - a common pattern with hacker databases being tracked. This suggests authorities may be actively pursuing the perpetrators.
4Defense Department personnel affected
Photos and ID documents of Defense Secretary Pete Hegseth were among the leaked data. The Defense Department hasn't immediately commented. The breach reportedly added about 500,000 new documents daily, indicating hackers had near real-time access to the verification company's systems, dramatically increasing the breach's severity.
5Age verification laws create risks
Governments increasingly implement age verification laws requiring adults to upload ID documents. Security experts have long warned that storing vast amounts of IDs creates theft risks. This breach proves those warnings valid. As more services require ID verification, the potential damage from such breaches grows exponentially.
6Potentially the largest ID breach
All evidence suggests this may be the largest single breach of identity documents in recent memory. IDScan and similar services are used everywhere from bars to car rentals, meaning millions rely on them daily. The breach's impact will likely be felt for years, affecting victims' financial security and personal privacy.
7Steps for affected users
Experts recommend immediate action for those whose IDs were compromised: freezing credit, monitoring bank accounts, and signing up for identity theft alerts. Exploring alternative verification methods is also wise. This breach highlights the need for individuals to be proactive about protecting their personal information in an increasingly digital world.
8Cybersecurity wake-up call
This incident underscores the fragility of identity verification systems. Companies must invest more in data security, while regulators need stricter oversight of these services. The rising frequency of major breaches demonstrates an urgent need for stronger protections of individuals' personal data across all industries.
Original article: cybersecurity | TechCrunch — Büyük bir kimlik doğrulama servisi hacklendi