FBI Probes Service Selling 153M+ Drivers Licenses
- ID
- 20762
- Status
- summarized
- Published
- 02 Sep 2026, 7:17 AM
- Fetched
- 04 Sep 2026, 1:53 AM
- Provider
- Hacker News
- Category
- dev-community
- Original URL
- https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
- Source URL
- https://hnrss.org/best
Summary
- Score
- 6.5
- Created
- 04 Sep 2026, 2:59 AM
- Tags
- Audience
- developerssaas_founders
What happened
A dark web service called Nexus is selling digital scans of 153M+ driver's licenses from the US and Canada, plus 10M+ ID cards, 3M+ travel documents, and 579K medical cards. Krebs on Security traced the likely source to a Louisiana-based identity verification company whose customers include multiple Fortune 500 firms, and the FBI's New Orleans field office has opened an inquiry.
Why it matters
If you integrate a third-party KYC or identity verification vendor into your app, this is a concrete reminder that those vendors are high-value breach targets holding the most sensitive PII your users will ever submit. Review your vendor's data retention policies, ask whether scanned documents are stored or deleted after verification, and consider whether you can minimize what you pass through third-party pipelines. Malaysian fintechs and eKYC users face the same vendor-risk structure.
Discussion angle
What does your current KYC/eKYC vendor actually do with the ID images after verification — and would you know if they were the source of a breach like this?