A threat actor this week started offering on the dark web digital scans of over 153 million US and Canadian driver’s licenses.
The driver’s licenses emerged on an identity theft service called Nexus. Simultaneously, a threat actor started promoting the service on a Russian cybercrime forum, claiming the possession of the IDs of over 170 million individuals.
On Nexus, visitors could find over 153 million driver’s licenses, more than 10 million identification cards, over 3 million travel documents and international IDs, and roughly 580,000 medical cards.
According to investigative journalist Brian Krebs, a blank search on Nexus appeared to return approximately 153 million results. Only around 1.1 million driver’s licenses were from Canada.
The threat actor behind Nexus alleged that the documents were exfiltrated from an active breach at an identity verification firm that serves multiple Fortune 500 companies, Krebs reports.
After verifying the presence of his own driver’s license on Nexus, as well as that of other individuals, Krebs concluded that the documents were likely siphoned from identity verification platform IDScan.net.
The Louisiana-based firm provides ID fraud prevention, access management, and age verification services, along with an ID-activated door lock and mobile ID scanners.