Executive Summary
A dark web marketplace is selling 153,000,000 American and Canadian driver’s licenses, reportedly siphoned from idscan[.]net, according to multiple social media posts. The illicit marketplace, dubbed Nexus, sells scans of IDs on over 170 million people in North America. This platform specializes in in-person identity verification and serves businesses such as major retail and shipping entities, marijuana dispensaries, and many more. The FBI New Orleans field office launched an official inquiry, while the identity verification company works urgently to validate that information and determine whether any unauthorized access occurred. IDScan[.]net has not yet confirmed unauthorized access or the incident’s scope.
The RH-ISAC Intelligence Team will continue to monitor the situation for relevant updates.
Key Takeaways
- The scans reportedly include 153 million driver’s licenses, 10 million ID cards, 3 million international travel cards, and 579,000 medical cards.
- A blank search returned 11.5 million pages of results with roughly 15 results per page.
- The illicit service advertised a Virginia driver’s license as a free sample on a Russian cybercrime forum, and the record included three pairs of photos of the license front and back, a basic image scan, as well as infrared and ultraviolet versions of the same images.
- Shortly after the initial report, the Nexus service was shut down, displaying only a message that it is no longer available.
