Dark web service Nexus lists over 153 million driver’s licenses for sale within hours of scanning

A dark web service called Nexus advertised the sale of scans for more than 153 million driver’s licenses, including high-resolution images and purported infrared and ultraviolet spectrum captures. The listings appeared within hours of individuals presenting their licenses to third-party scanning services used by businesses such as car rental companies and a Las Vegas dispensary chain.

The breach was first reported by KrebsOnSecurity, which noted that the number of available driver’s licenses grew by nearly 400,000 within 24 hours, indicating an ongoing, near real-time data harvesting operation. Among the listed IDs were those belonging to journalists, security researchers, and an FBI assistant director, with some records labeled as originating from commercial driver’s licenses or Common Access Cards.

The implicated third-party scanning service, IDScan.net, advertises that its scans capture both infrared and ultraviolet spectra. The company acknowledged the issue and said it is investigating, while representatives from the car rental company and the dispensary chain did not immediately respond to requests for comment.

Nexus removed its listings within hours of the report’s publication, preventing further verification of affected individuals. The FBI is reportedly investigating the incident, which unfolded in real time as scans were processed and immediately offered for sale.