The FBI is investigating a suspected black market operation involving the sale of stolen driver’s license records. Jennifer Griffin, Fox News national security correspondent, reports the potential risks this poses to national security and individual identity theft. The investigation highlights how millions of identification documents may have been compromised in the U.S. and Canada.
A service on the dark web, Nexus, claimed to possess over 153 million driver’s license records. This claim has not been confirmed, but it’s a cause for concern. Nexus advertised that it had collected millions of identification cards, travel documents, and medical cards. Investigators have discovered enough genuine data within the database to warrant FBI attention.
Think of how often you casually offer your driver’s license without considering the consequences. You hand over your ID to rent a car or check into a venue, and someone scans it. What happens next to those scans?
Nexus was revealed to the public via a Russian cybercrime forum. The service boasted identity documents covering more than 170 million people in North America, with driver’s licenses being the most significant subset. A test by KrebsOnSecurity showed Nexus’s service returned millions of records, suggesting the severity of the database’s size. The service also notably increased its records by about 400,000 entries in a single day.
Security researcher Brian Krebs reported that his own driver’s license was offered by Nexus as a free sample, prompting further investigation. Along with his license, records of people presenting their licenses at places like rental car businesses matched timestamps on Nexus records. This information led investigators to consider various potential sources of the data breach.
Involvement of IDScan.net
Investigators identified Louisiana-based IDScan.net in connection with the breach. IDScan.net provides identity verification services and has acknowledged a security incident. An unauthorized party might have accessed or copied data, including full names and driver’s license numbers.
IDScan.net has started notifying affected customers and offering credit monitoring. They have yet to confirm whether the records in Nexus came from their systems. Meanwhile, the driver’s license scans in Nexus often include ultraviolet and infrared images, similar to IDScan.net’s scanning methods.
FBI Steps In
The FBI confirmed it is investigating. The bureau’s statement noted ongoing inquiries but offered limited details. If the breach scale is true, it might be one of the largest exposures of government-issued identity documents in North America.
KrebsOnSecurity reported that shortly after publishing information about Nexus, the associated dark web site vanished. Its availability ceased, but it is unknown if the stolen records have been destroyed. Those who obtained data before the site went offline could still retain copies.
Dealing with Identity Theft Risks
A stolen driver’s license provides criminals with valuable data for impersonation and fraud. Here’s how you can protect yourself:
- Freeze your credit: Contact credit bureaus to place a freeze, preventing new account openings without affecting your credit score.
- Review credit reports regularly: Look for unfamiliar accounts that may indicate misuse.
- Monitor existing accounts: Set up alerts and review statements for unauthorized activity.
- Strengthen email and phone security: Use unique passwords, multifactor authentication, and ask carriers for enhanced account protection.
- Consider identity theft protection services: These can provide monitoring and recovery help if fraud occurs.
- Act quickly on fraud discovery: Use IdentityTheft.gov to report misuse and get a recovery plan. Contact state agencies for replacing compromised licenses.
The FBI and other authorities continue investigating, and while they do, it is essential to take proactive steps in safeguarding personal data. To read more tech insights and receive security alerts, consider following CyberGuy.com and its updates.