FBI Probes Service Selling 153M+ Drivers Licenses
- ID
- 20762
- Status
- summarized
- Published
- 02 Sep 2026, 7:17 AM
- Fetched
- 04 Sep 2026, 6:14 AM
- Provider
- Hacker News
- Category
- dev-community
- Original URL
- https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
- Source URL
- https://hnrss.org/best
Summary
- Score
- 5.5
- Created
- 04 Sep 2026, 6:16 AM
- Tags
- Audience
- developerssaas-founders
What happened
Krebs on Security reports that a dark web service called Nexus is selling digital scans of 153M+ driver's licenses from the US and Canada, plus 10M+ ID cards, 3M+ travel documents, and 579K+ medical cards. The data appears to originate from an active breach at a major Louisiana-based identity verification company serving Fortune 500 clients, and the FBI's New Orleans field office has opened an official inquiry.
Why it matters
If your SaaS or onboarding flow pipes user ID documents through a third-party identity verification vendor, this is a concrete reminder that those vendors are single points of catastrophic failure — 153M records leaked from one company. Builders should check which KYC/identity verification provider they depend on, whether that vendor is named in follow-up reporting, and whether their own data retention policy means they are storing ID scans they don't need to keep.
Discussion angle
What's your fallback if your identity verification vendor gets breached — do you even know which vendor your stack uses, and are you storing raw ID scans you could avoid retaining?