Identity Check: Your Information on the Dark Web
The FBI is currently investigating a suspected data breach that led to 153 million drivers’ licenses appearing on the dark web for purchase. Independent cybersecurity journalist, Brian Krebs, first reported the fiasco when he found his Virginia license available as a “free sample” on an identity theft service. U.S. Defense Secretary, Pete Hegseth’s Minnesota driver’s license was also found available on the site.
The Data Breach
A source alerted Krebs about a dark web site, known as “Nexus”, that offered digital scans of IDs for sale. After running a blank search on the site, Krebs found “more than 153 million drivers licenses for people in the United States and Canada, as well as more than 10 million identification cards; more than three million travel documents and/or international IDs; and at least 579,000 medical cards”. Within a day, the site uploaded hundreds of thousands more IDs, indicating that the breach was live. Shortly after Krebs published the exposé on KrebsOnSecurity, the Nexus site was removed.
The KrebsOnSecurity team narrowed in on a possible leak at an identity verification company that validates IDs within retail, transportation, finance and other businesses nationwide. IDScan.net later confirmed the data security incident and began their investigation in early September.
How To Protect Yourself
A high-quality ID scan is a gold mine for identity thieves. Unlike bits of data or passwords, the information on ID cards cannot easily be changed. It is vital to stay vigilant by reviewing credit reports, account statements and emails for any suspicious activity. If you suspect your information was stolen, file a report and find more resources at IdentityTheft.gov.
Security breaches will continue to occur at various scales. It is important to regularly monitor your accounts for any alarming behaviors. Contact us at info@kazmarek.com to ensure that you are taking proactive steps to safeguard your information.