Rental scan lands on dark web

Hours after scanning a driver's license at a car rental counter, high-resolution images of the ID were posted for sale on a dark web marketplace called Nexus.

“Within hours of an employee scanning my driver’s license, a high-resolution scan of my ID was available for sale on the dark web.”

Millions of IDs exposed with spectrum scans

Nexus offered over 153 million identity documents. The leaked files included infrared and ultraviolet scans designed to help counterfeit IDs bypass hologram tests.

“Besides a basic image scan, the files also captured the images in the infrared and ultraviolet spectrums.”

Real-time leakage feeds massive growth

The dark web platform grew by nearly 400,000 licenses in a single day. Recent customer scans appeared online within hours, indicating an active breach harvesting fresh data.

“Over a span of 24 hours, Krebs said the number of driver’s licenses listed as available grew by almost 400,000.”

Scanning vendor linked to breach

Evidence points to third-party verification providers like IDScan.net, a service used by major rental companies and dispensaries that explicitly captures multi-spectrum ID scans.

Service goes offline amid investigation

Nexus went dark shortly after the security report was published, and federal law enforcement has launched an investigation into the massive data leak.

“Nexus went dark within hours of the KrebsOnSecurity scoop, although that also means there’s no way for people to check if their IDs are included.”