The Federal Bureau of Investigation (FBI) is reportedly investigating identity theft as digital scans of more than 153 million driver’s licenses went on sale on the dark web. Additional documents offered through a massive security breach include medical cards, residence cards, and more. The licenses belong to people in the US and Canada, and appear to have been collected by hacking an identity verification service.

Krebs on Security was able to confirm the authenticity of the claim made by the cybercriminals as they were able to provide a scan of his own driving license, with other victims likewise confirming their scans were correct. A new identity theft service dubbed Nexus launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada.

The people behind Nexus claim the license images are coming from an active breach at “a major identity verification company” whose customers include multiple Fortune 500 companies. Krebs On Security also has learned that the New Orleans field office of the FBI today launched an official inquiry into the source of the images. The report says that the ID verification company appears to be one based in Louisiana.

The criminals claim that they still have access to the source of these scans, a claim supported by their adding almost 400,000 new ones within the past 24 hours. There are indications suggesting that at least some of the data was stolen from a verification service used by rental car company Hertz. The report points to a New Orleans-based company as a potential source, and that company’s client list includes Hertz, Target, Fedex, Motorola Solutions, Jack Henry, and Caesars Entertainment.