The FBI is currently investigating an alleged black market operation that has reportedly sold stolen driver’s license records. Fox News national security correspondent Jennifer Griffin provides updates on this investigation on ‘Special Report.’
Consider how frequently you present your driver’s license without concern. You might rent a car, check into a business, or prove your age. Each time, your ID is scanned and returned to you without much thought.
The Dark Web Nexus
A dark web service named Nexus has claimed responsibility for collecting more than 153 million driver’s license records from the US and Canada. Additionally, it reportedly holds over 10 million identification cards, 3 million travel documents or international IDs, and at least 579,000 medical cards.
Note: The number of 153 million driver’s license records is based on Nexus’ claims and is not independently verified.
Despite the unconfirmed total, researchers found enough valid driver’s licenses in the database to capture the FBI’s interest.
Nexus on the Cybercrime Forum
Nexus appeared on the Russian cybercrime forum Exploit on August 31, advertising access to documents of more than 170 million individuals in North America, with driver’s licenses being the largest category.
According to a test by KrebsOnSecurity, a blank search on Nexus yielded about 11.5 million pages of results. This further supports the likelihood of a significant data collection, even though it doesn’t prove verifier written number of unique individuals.
Cues from Driver’s License Scans
Timestamps on some images helped researchers begin tracing possible origins of the records. Cybersecurity journalist Brian Krebs found his own Virginia driver’s license offered as a sample by Nexus.
With timestamps closely aligned with travel dates, the investigation expanded beyond airport security as a sole explanation for record collection. For instance, Krebs noted that he provided his license to a Hertz rental car representative aligning with scan times.
Security Breach Link: IDScan.net
Attention turned to IDScan.net, a company that partnered with Planet 13, a marijuana dispensary. Similarities in scanning methods linked them to the Nexus records. The firm admitted a security breach that could involve unauthorized access to stored customer data.
Potentially affected individuals are being notified, and free credit monitoring is being offered, but connections to Nexus remain unconfirmed.
Consequences and Protective Measures
The FBI has confirmed its engagement in the ongoing investigation. While Nexus has vanished from the web, uploaded data might still exist, posing risks if used for identity theft.
Your driver’s license contains details that, if stolen, can make impersonation easier for criminals. Consider taking measures to safeguard your information:
- Freeze your credit to prevent new accounts from being opened in your name.
- Regularly review credit reports for unfamiliar accounts or inquiries.
- Enable transaction alerts for current accounts to monitor suspicious activity.
- Strengthen the security of your primary email and mobile accounts.
- Consider a professional identity theft protection service for additional monitoring.
Act swiftly if you find any misuse of your identity by documenting events and reporting through IdentityTheft.gov for a personalized recovery plan.