FBI Investigation: Driver’s License Records on the Dark Web

FBI Probes Alleged Driver’s License Theft

The Federal Bureau of Investigation is investigating a reported black market operation involving stolen driver’s license records. Fox News national security correspondent Jennifer Griffin highlighted the potential risks to national security and identity theft, as millions of personal documents may have been compromised.

A service known as Nexus claimed to have amassed over 153 million driver’s license records from individuals in the United States and Canada. Additionally, it purportedly gathered more than 10 million identification cards, over 3 million travel documents, and at least 579,000 medical cards.

This figure, however, comes exclusively from Nexus and has not been independently verified. Multiple images of the same license appeared in some records. Nonetheless, researchers identified enough genuine driver’s licenses in the database to prompt FBI involvement.

You frequently hand your driver’s license for verification during rental, business check-ins, or age verification. It often returns to you without a second thought, yet the ease of scanning poses risks of identity theft.

Inside the Nexus Database

Nexus surfaced on the Russian-language cybercrime forum Exploit on August 31, advertising access to identity documents for over 170 million individuals across North America. Driver’s licenses comprised the primary category.

In testing, the service generated approximately 11.5 million result pages, each featuring about 15 records. Although this data suggests a vast collection, investigators have not confirmed the database contains 153 million unique identities.

The organization’s claims of continuously gathering new data over the past year remain unverified. In particular, the driver’s license count increased by nearly 400,000 records within 24 hours during KrebsOnSecurity’s analysis.

Tracing the Source

Researchers utilized timestamps found in license scans to trace origins. Cybersecurity journalist Brian Krebs discovered his Virginia driver’s license offered as a free sample by Nexus promoters.

The timestamps on nine people’s licenses linked directly to dates when they had presented identification or traveled, suggesting involvement beyond airport security. For instance, Krebs and his mother’s licenses bore timestamps following a rental car transaction.

Link to Identity Verification Company

The Planet 13 connection aligned with IDScan.net’s involvement with the dispensary, which utilizes scanners that capture IDs using infrared, ultraviolet, and white light—similar to the additional scans identified in Nexus records.

IDScan.net acknowledges a security breach, asserting unauthorized third-party access to stored customer information, potentially including full names and identification numbers. Notification and free credit monitoring are offered to affected individuals, though there’s no confirmation Nexus’s database originated from their systems.

FBI’s Involvement

The FBI has confirmed ongoing investigation efforts related to the alleged breach. If verified, this exposure may rank among the largest incidents of identity document theft in North America.

Nexus site’s disappearance further complicates matters as its login page now displays the service’s unavailability. Stolen records likely persist in circulation among those who accessed them before shutdown.

Risks of Stolen Driver’s License Scans

Driver’s licenses contain vital information like full name, address, date of birth, license number, photograph, and signature—all potentially exploitable by criminals for impersonation.

A stolen card number can be canceled, yet replacing personal identity information proves challenging.

Protection Measures

1. Freeze Your Credit: Initiate a free credit freeze with Equifax, Experian, and TransUnion to prevent unauthorized credit account creation using your identity.
2. Review Credit Reports: Regularly scrutinize credit reports for unfamiliar accounts or information. The FTC advises consistent monitoring.
3. Monitor Existing Accounts: Enable transaction alerts, watch for unauthorized activity, and review statements beyond alerts.
4. Secure Email and Phone Accounts: Strengthen security with robust, unique passwords, multifactor authentication, and added mobile protections.
5. Consider Identity Theft Protection: Explore services offering monitoring, alerts, and assistance in fraud recovery.
6. Prompt Action: Report identity misuse to IdentityTheft.gov and your state’s motor vehicle agency. Retain documentation for dispute resolution.

In light of the investigation, consider reducing unnecessary exposure, monitor and protect your accounts, and ask about handling of scanned driver’s license images.