Massive Data Breach Exposes 153 Million Driver's Licenses from Louisiana Firm

A Louisiana identity verification firm is facing scrutiny following a significant data breach that has exposed over 153 million driver's licenses from the U.S. and Canada. Reports indicate that scans of these licenses were briefly available for sale on a dark web service called Nexus, which is believed to be linked to a breach at IDScan.net.

The listings, advertised on the Russian cybercrime forum Exploit, included comprehensive scans complete with infrared and ultraviolet images, as well as timestamps that corresponded with client visits to businesses like Hertz and Planet13 dispensaries. Individuals who checked the records confirmed their accuracy regarding these visits.

IDScan.net, which processes over 21 million ID checks monthly for various businesses including Target and FedEx, has not yet confirmed the breach but is actively investigating the situation. Jillian Kossman, a marketing and operations leader at IDScan.net, stated that they are unable to share further details at this time but are grateful for the information provided to assist in their investigation.

The FBI's New Orleans field office has initiated an inquiry into the breach. Following the reporting, Nexus has since gone offline and issued a notice indicating its unavailability.