The FBI is reportedly investigating a major identity theft case after digital scans of more than 153 million driver’s licences from the United States and Canada were offered for sale on the dark web.
The data is allegedly linked to a breach involving an identity verification service, while other documents including medical and residence cards were also reportedly exposed.
What data is being sold on the dark web?
A newly launched identity theft service known as “Nexus” is reportedly selling digital scans of more than 153 million driver’s licences belonging to people in the US and Canada.
The people behind the service claim the licence images came from an active breach at a major identity verification company whose customers include several Fortune 500 companies.
The report said additional documents exposed through the wider security breach include medical cards, residence cards and other records.
How was the alleged breach discovered?
KrebsOnSecurity reported that it was able to confirm the authenticity of the criminals’ claim after they provided a scan of the reporter’s own driving licence. Other victims also reportedly confirmed that the scans shown to them were accurate.
The hackers were also said to be continuing to obtain data. According to the report, nearly 400,000 additional scans were added within a 24-hour period.
Algoritha Security Launches ‘Make in India’ Cyber Lab for Educational Institutions
What is the FBI investigating?
The FBI’s New Orleans field office reportedly launched an official inquiry into the source of the licence images.
The investigation is focused on determining where the documents originated and how such a large collection of identity records allegedly reached the criminals operating the dark web service.
The identity verification company believed to be involved is reported to be based in Louisiana, although the screenshots do not identify the company by name.
Which companies could be connected to the exposed data?
The report indicates that at least some of the information may have been stolen from a verification service used by rental car company Hertz.
It also points to a New Orleans-based company as a potential source. Its reported client list includes Hertz, Target, FedEx, Motorola Solutions, Jack Henry and Caesars Entertainment.
The available information does not establish that each of these companies suffered a direct breach. Rather, they are identified as clients of the company cited as a potential source.
Why are stolen driver’s licence scans dangerous?
Driver’s licences contain personal information that can be valuable to criminals attempting identity theft. The reported breach is particularly concerning because the documents were allegedly taken from a service designed to verify people’s identities.
The sale of actual digital scans could give criminals access to documents that may be misused in identity-related fraud. The presence of medical cards, residence cards and other documents could further increase the amount of personal information exposed.
What happens next?
The FBI inquiry is expected to focus on identifying the source of the images and establishing the extent of the reported breach. The claim that more than 153 million licence scans are being sold remains central to the investigation.
The case also highlights the risks created when organisations holding large collections of identity documents are compromised. Determining exactly what information was accessed, where it came from and whose records were affected will be critical as the investigation continues.
About the author — Ayesha Aayat writes on cybercrime, digital safety, and emerging online threats. Her work focuses on public awareness, legal clarity, and technology-driven risks.
