Tuesday 15 September 2026
Evening EditionRSS

ZOTPAPER

News without the noise

ZOTPAPER
Security

Dark Web Platform Exposes 153 Million Driver’s Licenses; FBI Investigating

Ars Technica reporter’s own ID found for sale on Nexus service, prompting probe into massive identity theft operation

edit
By LineZotpaper
Published
Read Time2 min
A new dark web service called Nexus is offering more than 153 million driver’s licenses for sale, including those of a prominent security journalist and an FBI assistant director, according to an exposé by KrebsOnSecurity. An Ars Technica reporter confirmed that his own license, scanned by a rental car company, was listed on the platform within hours, raising alarms about the breadth and sophistication of the data breach.

A dark web marketplace named Nexus has come to light, advertising the sale of over 153 million driver’s licenses, according to a report published Tuesday by KrebsOnSecurity. The platform is purportedly selling high-resolution scans of IDs that include both the front and back, as well as images captured in infrared and ultraviolet spectrums. The additional imagery could enable cloned counterfeit IDs to pass hologram tests, experts say.

Dan Goodin, an Ars Technica reporter, detailed his personal experience with the breach. Shortly after renting an SUV from a well-known car rental company, his driver’s license appeared for sale on Nexus. The discovery prompted him to investigate, and he found that his ID was among a trove that also included the license of journalist Brian Krebs, his mother, an FBI assistant director, and several security researchers.

The exposé indicates that the service is rapidly growing, with the number of IDs available increasing daily. The FBI is now investigating the service and the source of the data. The breach appears to involve a vulnerability in the systems used by car rental companies or other entities that scan licenses, though the precise origin remains unconfirmed.

Nexus is offering not only driver’s licenses but also a variety of other forms of identification, though the full scope of its inventory has not been disclosed. The implications for victims are significant, as the detailed scans could be used to create convincing fake IDs for identity theft, fraud, or other criminal activities.

KrebsOnSecurity’s report has put a spotlight on the security of ID-scanning practices across industries, with calls for stronger safeguards on the handling of sensitive personal data.

§

Analysis

Why This Matters

  • Widespread Identity Theft: Over 153 million driver’s licenses are for sale, meaning a vast number of individuals could face fraud, unauthorized account openings, or other identity crimes.
  • Vulnerability in Everyday Transactions: The breach originated from a routine rental car interaction, highlighting how easily personal data can be harvested from common services that scan IDs.
  • Sophisticated Counterfeiting Risk: The inclusion of infrared and ultraviolet spectrum scans suggests that even advanced security features on licenses can be replicated, potentially undermining trust in ID verification systems.

Background

Driver's licenses have long been a primary target for identity thieves because they contain high-quality personal information—name, address, date of birth, and often a photograph—that can be used to open bank accounts, apply for loans, or evade law enforcement. In recent years, dark web marketplaces have proliferated, offering stolen financial data, medical records, and now scanned IDs. The scale of this breach, involving over 150 million records, would make it one of the largest known collections of driver's license data ever exposed. Similar incidents in the past have been traced to lax security at data brokers or high-volume ID-scanning businesses, though this case involves a car rental company.

Key Perspectives

Victims (including journalists and law enforcement): They face direct harm from having their highly personal data publicly available. The inclusion of an FBI assistant director’s license underscores the severity, as it could enable physical impersonation or targeting of officials. The FBI: Investigators are now working to identify the source of the data and the operators of Nexus. They will likely seek to shut down the platform and prosecute those responsible, but the sheer number of IDs makes remediation challenging. Critics/Skeptics: Some question whether the claims of 153 million records are inflated or if the data is entirely accurate. Others worry that focusing on the shock value may distract from systemic issues—such as how easily car rental companies hoover up and fail to secure sensitive personal data.

What to Watch

  • The FBI’s investigation timeline: Any arrests or takedown notices in the coming weeks.
  • Response from car rental companies: Whether the affected firm confirms a breach and what steps it takes to secure its scanning processes.
  • Emergence of cloned IDs using Nexus data: Law enforcement may see a wave of fake IDs that pass advanced verification tests.

Sources

newspaper

Zotpaper

Articles published under the Zotpaper byline are synthesized from multiple source publications by our AI editor and reviewed by our editorial process. Each story combines reporting from credible outlets to give readers a balanced, comprehensive view.

Editorial ProcessSubscribe