A new dark web identity theft service called Nexus is selling digital scans of over 153 million driver's licenses from the United States and Canada, along with millions of other identification documents. Krebs On Security reports the service launched on the Russian cybercrime forum Exploit, offering free samples including the Virginia license of journalist Brian Krebs. The database includes records for high-profile individuals such as U.S. Defense Secretary Pete Hegseth.

The FBI's New Orleans field office has opened an official inquiry into the source of the images, which appear to originate from a Louisiana-based identity verification company serving Fortune 500 clients. Nexus claims continuous data exfiltration for over a year, with nearly 400,000 new license records added in 24 hours. Some scans include infrared and ultraviolet images with timestamps matching recent travel dates.

Records also contain marijuana dispensary cards, commercial driver's licenses (CDL), and possible Common Access Cards (CAC) for government facilities. The breach suggests ongoing, real-time harvesting of identity verification data.