I rented a car, and within hours, my driver's license was for sale
Key Points:
- A new ID theft service called Nexus was found selling over 153 million high-resolution scans of driver’s licenses and other forms of identification, including images in infrared and ultraviolet spectrums that could aid in creating counterfeit IDs.
- The data breach appears to stem from real-time access to information collected by third-party scanning services used by businesses like car rental companies and marijuana dispensaries, with the number of available IDs rapidly increasing by hundreds of thousands within a day.
- Nexus offered a wide range of IDs for sale, such as commercial driver’s licenses, government-issued Common Access Cards, medical cards, and employment authorizations, indicating a broad and serious security compromise.
- Investigations are ongoing, with the FBI involved and IDScan.net, a New Orleans-based ID scanning service linked to the breach, reportedly looking into the issue, while Nexus went offline shortly after the exposé was published.
- The breach raises significant concerns about personal data security, especially given the advanced imaging techniques used to capture IDs, although the shutdown of Nexus and the FBI investigation provide some reassurance.