Archive — US — techcrunch
It sure looks like hackers breached a major ID card verification service
A major data breach has reportedly compromised a vast store of identity documents, including over 150 million driver's licenses and passports, which could affect users in the U.S. and Canada. The breach is linked to an identity verification service likely targeted by hackers, raising urgent concerns about data security and privacy as governments increase reliance on document verification.
Key points
- Investigative journalist Brian Krebs reported a suspected data breach of a major ID verification service.
- The breached documents include over 150 million identity cards belonging to people from the U.S. and Canada.
- A dark web site called Nexus surfaced, allowing searches through the stolen ID documents, adding around half a million new documents daily.
- Krebs confirmed his own driver's license was among those compromised, indicating the breach's authenticity.
- IDScan, the identified source of the breach, manages identity verification for several major brands but has not yet commented officially.
- The FBI is investigating the breach as it raises security concerns amid increased government reliance on document verification.
Why it matters
- The breach reflects ongoing vulnerabilities in identity verification systems, which are critical as governments adopt stricter digital age verification laws.
- Concerns have been raised previously about the security of personal data stored by companies and the risks associated with massive data collections.
- This incident aligns with a larger trend in 2025 emphasizing the need for robust cyber security measures as digital identities become increasingly central to online interactions.
This incident highlights significant risks involved in handling sensitive identity information and underscores the urgent need for improved security protocols in the face of rising cyber threats.