A dark web identity theft service known as Nexus has reportedly offered scans of more than 153 million driver’s licenses from people in the United States and Canada.
The FBI’s New Orleans field office has opened an investigation into the suspected source of the records, which may be linked to Louisiana-based identity verification provider IDScan.net.
The service first appeared on the Russian cybercrime forum Exploit on August 31, advertising access to identity documents belonging to more than 170 million people across North America.
Nexus claimed its database included more than 153 million driver’s licenses, over 10 million other identification cards, more than 3 million travel and international identity documents, and at least 579,000 medical cards.
Driver’s License Scans Leak on Dark Web
Researchers reviewing the service said its driver’s license count appeared plausible. A blank search reportedly returned about 11.5 million pages of results, with roughly 15 records shown on each page.
The collection included records from both countries, although U.S. residents appeared to make up most of the database. Searches reportedly found about 1.1 million Canadian driver’s licenses, including 473,673 records from Ontario.
The exposed material allegedly included front-and-back scans of licenses, along with infrared and ultraviolet versions. Those extra image layers are significant because identity verification platforms commonly use them to validate document security features and detect fraudulent IDs.
Some listings also included date-and-time information attached to image files, potentially showing when the document was scanned.
KrebsOnSecurity found that several people whose licenses appeared in Nexus had used their IDs while traveling or renting vehicles near the timestamps in the records. In one case, a researcher found that their own license scan was linked to a visit to a marijuana dispensary.
The reporting pointed to possible use of IDScan.net technology, which provides identity verification services to businesses and says its systems process more than 21 million verifications each month across more than 20,000 locations worldwide.
IDScan.net has not confirmed a breach. The company said it was investigating the claims and working to determine whether unauthorized access occurred and what information may have been affected.
Early statements from the company stressed that the nature and scope of the potential incident had not yet been established. The FBI investigation raises concerns because driver’s license scans are highly valuable to fraudsters.
Unlike passwords, physical identity documents cannot simply be reset after exposure. Criminals can use license images to support account takeover, synthetic identity fraud, loan and credit applications, SIM-swapping attempts, and social-engineering operations.
High-quality facial images may also create privacy and safety risks for people attempting to avoid being located. Nexus reportedly disappeared shortly after the story became public, replacing its login page with a message stating that the service was no longer available.
However, the removal of one dark web storefront does not mean the data is gone. The records may have already been copied, resold, or moved to other criminal marketplaces.
The case highlights the growing risk created when organizations collect and retain large volumes of identity documents. Companies that scan IDs should limit retention, encrypt stored images, strictly control access, and promptly investigate any unusual data exfiltration activity.
Learn 7 Metric-Gated AI SOC Deployment Phases – Download Free AI SOC Deployment Playbook 2026.
The post 153 Million Driver’s License Scans Surface on Dark Web as FBI Opens Investigation appeared first on Cyber Security News.