FBI Probes License-Scan Bazaar Tied to Identity Firm
A new dark-web service called Nexus is selling more than 153 million driver’s license scans from the United States and Canada, and KrebsOnSecurity says the FBI’s New Orleans field office has opened an inquiry into where the images came from. The service also claims more than 10 million ID cards and other documents, with records continuing to grow.
The reporting ties the trove to an active breach at a Louisiana identity-verification company. That matters because these scans are the kind of documents many online services use to prove who a customer is; once authentic-looking images are circulating, password resets and MFA do nothing to stop fraud that starts at the ID-check step.
For companies that outsource document review or remote onboarding, the exposure may now sit downstream of the breached vendor as much as at the vendor itself. If a service reused those checks for account opening, KYC, age, or eligibility verification, the trust failure can travel with the documents into other systems.