It sure looks like hackers breached a major ID card verification service
A major identity verification service, likely IDScan, is suspected of suffering a massive data breach that exposed millions of driver's licenses and passports. The stolen data has reportedly appeared on a dark web site called Nexus, which allows users to search through millions of government-issued documents.
Why it matters
This breach poses a severe risk of identity theft for millions of individuals in the US and Canada, highlighting vulnerabilities in third-party verification services.
If you have handed over your driver’s license, passport, or other form of identity document to verify your information in the real world, like at a bar, a weed store, or when booking a car rental, there’s a good chance it’s now been stolen in a suspected massive data breach.
That’s according to a jaw-dropping report by independent security journalist Brian Krebs, who says a company used to verify government-issued identity documents in the real world was likely hacked and its vast stores of people’s ID cards were exfiltrated.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in