The stolen data surfaced on a dark web marketplace called Nexus, which claimed to ingest roughly half a million new documents every day. Security researcher Zach Edwards and Krebs traced the breach to IDScan, a Louisiana-based provider that processes verification checks for major tech and consumer brands. The database included authentic records, with the personal identification of Secretary of Defense Pete Hegseth reportedly found among the searchable files.
In section Startups & Technology
Suspected massive data breach exposes millions of ID records
More than 150 million driver’s licenses and passports from the United States and Canada may have been compromised following a suspected breach at a major identity verification firm. The incident, first detailed by security journalist Brian Krebs, suggests attackers gained near real-time access to a massive repository of government-issued identification documents.
While IDScan chief operating officer Jillain Kossman stated the company is investigating the matter, the firm has yet to provide a formal public response. The FBI’s New Orleans field office is reportedly probing the breach, which forced the Nexus site offline shortly after the findings were published. The scale of the exposure highlights the risks inherent in identity verification mandates, which often require businesses to store vast quantities of sensitive citizen data.
Comments (0)
No comments yet. Be the first!