Dark‑Web Marketplace Claims 153 Million Driver’s License Scans Stolen

It’s the kind of thing most of us do without a second thought: hand over a driver’s license to rent a car, prove our age at a bar, or verify our identity for a hotel check‑in. The card is scanned, a quick photo is taken, and then—pfft—it’s back in our wallet.

But on the other side of the internet, a murky service known as Nexus is bragging that it has scraped and stored more than 153 million of those scans. According to the site, the trove isn’t limited to U.S. drivers’ licenses; it also includes Canadian IDs, plus over 10 million other identification cards, 3 million travel documents, and roughly 579 000 medical cards.

Sounds terrifying, right? Yet there’s a catch. The 153‑million figure comes straight from Nexus itself—it hasn’t been independently verified, and the count may inflate the real number of unique individuals. Some entries are duplicate images of the same license, and it’s unclear how many distinct people are actually represented.

Still, security researchers digging into the database found enough authentic‑looking driver’s licenses to raise a red flag. The FBI, already watching the dark web for illicit data markets, opened an investigation after the claims surfaced, treating the possible breach as a national‑security and identity‑theft concern.

Federal agents haven’t disclosed how the data allegedly got onto Nexus, nor have they confirmed the exact scale of the breach. What they have said, though, is that any exposure of personally identifiable information—especially something as universally used as a driver’s license—could fuel fraud, synthetic‑identity scams, and even more sophisticated attacks on individuals and businesses.

For the average person, the practical takeaway is to stay vigilant. If you receive a suspicious email, text, or call asking for personal details, treat it as a potential phishing attempt. Consider placing a fraud alert on your credit files, monitor your statements for odd activity, and, when possible, opt for two‑factor authentication on accounts that support it.

Meanwhile, the FBI’s cyber division is working with partners in both the United States and Canada to trace the source of the data, dismantle the marketplace, and bring any responsible parties to justice. As the investigation unfolds, officials are urging the public not to panic but to be proactive about protecting their identities.

In a world where digital footprints are everywhere, the Nexus episode is a stark reminder that even the most routine interactions—like flashing a license at a gas pump—can have unintended consequences when the data lands in the wrong hands.