Dark Web Service Sells 153 Million Driver's Licenses in Real Time
A dark web identity theft service called Nexus is selling high-resolution scans of more than 153 million driver's licenses, according to an exposé published Tuesday by KrebsOnSecurity. Among the victims are Ars Technica security editor Dan Goodin, journalist Brian Krebs, his mother, an FBI assistant director, and several security researchers. The scans reportedly include front and back images of each ID, along with captures in the infrared and ultraviolet spectrums, which could allow counterfeiters to clone IDs that pass hologram verification tests.
The service goes far beyond driver's licenses. Nexus also advertises identification cards, travel cards, international licenses, medical cards, Common Access Cards, residence cards, and employment authorizations. Some records list their source as "CDL," possibly meaning commercial driver's licenses, while others reference "CAC," the government-issued cards that grant physical access to secure buildings and rooms. Nexus even claims to sell scans of marijuana dispensary cards, with one victim's record appearing after a visit to a Planet13 outlet in Las Vegas.
The most alarming detail is the speed of the operation. New scans appear within hours, and sometimes within a day, of victims presenting their IDs at rental companies or other businesses. This timing suggests Nexus has near real-time access to data flowing through third-party verification systems used when IDs are scanned. The FBI is reportedly investigating the breach, which continues to grow by the day as more licenses are scanned and added to the service's inventory.