A threat actor has begun offering digital scans of over 153 million US and Canadian driver’s licenses on a dark web identity theft service called Nexus. Alongside the driver's licenses, there's also access to more than 10 million ID cards and other identification documents. Investigative journalist Brian Krebs identified the potential source of the breach as IDScan.net, a verification firm used by multiple Fortune 500 companies.
Following the discovery, the FBI initiated an investigation, particularly as some compromised IDs reportedly belonged to FBI agents. Security experts advise organizations to prepare for potential identity compromise and suggest individuals limit sharing their ID copies.