{"id":745915,"date":"2026-09-03T15:00:41","date_gmt":"2026-09-03T12:00:41","guid":{"rendered":"https:\/\/buradabiliyorum.com\/en\/it-sure-looks-like-hackers-breached-a-major-id-card-verification-service\/"},"modified":"2026-09-03T15:00:41","modified_gmt":"2026-09-03T12:00:41","slug":"it-sure-looks-like-hackers-breached-a-major-id-card-verification-service","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/it-sure-looks-like-hackers-breached-a-major-id-card-verification-service\/","title":{"rendered":"It sure looks like hackers breached a major ID card verification service"},"content":{"rendered":"
\n

If you have handed over your driver\u2019s license, passport, or other form of identity document to verify your information in the real world, like at a bar, a weed store, or when booking a car rental, there\u2019s a good chance it\u2019s now been stolen in a suspected massive data breach.<\/p>\n

That\u2019s according to a jaw-dropping report<\/a> by independent security journalist Brian Krebs, who says a company used to verify government-issued identity documents in the real world was likely hacked and its vast stores of people\u2019s ID cards were exfiltrated.<\/p>\n

Krebs reports that an identity theft site called Nexus, which launched on the dark web this week, claimed to allow users to search through more than 150 million driver\u2019s licenses and passports belonging to people who live in the United States and Canada. A post advertising the site on a known Russian cybercrime forum said Nexus added about half a million new documents daily, sourced from a \u201cmajor identity verification company,\u201d implying that the hackers had near real-time access to the identity verification company\u2019s systems.<\/p>\n

The advert claims that \u201ccustomer photos are displayed if available.\u201d Krebs found that his own driver\u2019s license was among the searchable records in the database, confirming that the data was authentic. Secretary of Defense Pete Hegseth was also among the people whose photos were listed on the identity search site.<\/p>\n

A spokesperson for the Department of Defense told TechCrunch that it is \u201caware of these reports and is evaluating them.\u201d<\/p>\n

Working with security researcher Zach Edwards<\/a>, whose ID card was also stolen in the breach, Krebs identified the likely source as the identity verification service IDScan<\/a>. The Louisiana-based company is relied on by major tech and consumer brands to verify tens of millions of people\u2019s IDs around the world each month.<\/p>\n

IDScan chief executive Jimmy Roussel did not return TechCrunch\u2019s request for comment, but the company\u2019s chief operating officer Jillian Kossman told Krebs that the company was investigating. Krebs said the FBI\u2019s field office in New Orleans is also probing the breach. <\/p>\n

A spokesperson for the FBI confirmed that the bureau is \u201clooking into the incident,\u201d but declined to comment further.<\/p>\n

Nexus went offline shortly after Krebs\u2019 report went live.<\/p>\n

This data breach comes as governments are increasingly rolling out age-verification laws, which largely rely on requiring adults to upload their identity documents to verify that they are old enough to enter a website or app<\/a>. Security experts and privacy advocates have long warned that companies storing vast amounts of people\u2019s identity documents for long periods of time put that data at risk of theft by hackers.<\/p>\n

By all accounts, this would be the largest known single breach of identity documents in some time.<\/p>\n

Updated with response from FBI.<\/em><\/p>\n<\/div>\n

When you purchase through links in our articles, we may earn a small commission. This doesn\u2019t affect our editorial independence.<\/em><\/p>\n

If you liked the article, do not forget to share it with your friends. Follow us on\u00a0Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n

\n

If you want to read more like this article, you can visit our Technology<\/a><\/span> category.<\/strong><\/p>\n<\/blockquote>\n

Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

If you have handed over your driver\u2019s license, passport, or other form of identity document to verify your information in the real world, like at a bar, a weed store, or when booking a car rental, there\u2019s a good chance it\u2019s now been stolen in a suspected massive data breach. That\u2019s according to a jaw-dropping…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[158886,70375,72458,72286,158041,72287],"class_list":["post-745915","post","type-post","status-publish","format-standard","hentry","category-technology","tag-age-verification","tag-cybersecurity","tag-data-breach","tag-identity-theft","tag-identity-verification","tag-security"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/745915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=745915"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/745915\/revisions"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=745915"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=745915"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=745915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}