Millions of driver’s license scans exposed on dark web after Louisiana ID-verification breach

A massive leak of digital scans of over 153 million driver’s licenses from the United States and Canada has surfaced on the dark web, according to cybersecurity journalist Brian Krebs. The illicit marketplace, branded Nexus, advertised the data alongside other personal documents such as medical cards and employment records. Krebs confirmed the files were genuine after receiving a scan of his own license and learning that the hackers also possessed a copy of Secretary of Defense Pete Hegseth’s license.

The breach is believed to stem from IDScan, a Louisiana-based identity-verification service whose clients include Hertz, Target, FedEx, Motorola and Jack Henry. Many of the affected individuals had rented cars from Hertz, which relies on IDScan for ID checks. The FBI’s New Orleans field office has launched an investigation, while the Nexus site has since been taken offline. Authorities warn that, although the documents are no longer listed for sale, the data remains in circulation.