Zing Open Zing
Technology

FBI investigates potential breach of 153 million driver's licenses

8 September 2026 · Source balance: Centre

The FBI is investigating a possible data breach involving more than 153 million driver's license scans from people in the United States and Canada. A cybersecurity journalist discovered a dark web service called Nexus advertising digital copies of millions of government-issued ID documents for sale on a Russian cybercrime forum early September. The service apparently obtained the data from an identity verification company based in Louisiana that works with rental car agencies and marijuana dispensaries. The actual source of the breach remains unconfirmed, though investigators believe it stems from an active breach within a major ID verification provider. If authentic, this could be one of the largest exposures of government-issued identification documents in North America, creating risks of identity theft and fraud for tens of millions of people. The Nexus service went offline shortly after the discovery was publicly reported. The FBI's New Orleans field office confirmed it is investigating the incident but declined further comment due to the ongoing nature of the probe.

Key facts

  • More than 153 million driver's licenses from the U.S. and Canada were advertised for sale on dark web service Nexus
  • Breach discovered and reported by cybersecurity journalist Brian Krebs on September 2-3, 2026
  • Additional 10 million ID cards, 3 million travel documents, and 579,000 medical cards were included in the alleged breach
  • Defense Secretary Pete Hegseth's driver's license was among those offered for sale, according to Krebs
  • FBI's New Orleans field office opened investigation; company IDScan.net confirmed investigating the incident
  • Dark web site went offline shortly after public reporting; unconfirmed whether breach claims are authentic
  • Experts describe this as potentially the largest single leak of driver's license data at this scale

Limits of this briefing

The breach has not been independently confirmed as authentic, though multiple security experts vouched for sample data. The exact source of the stolen data remains unestablished, and only limited right-leaning outlet coverage was identified in current reporting.

Sources

More stories

See all latest stories