- Sources: primary, discussion
- Summary: Krebs on Security reports that a dark web service advertises scans of more than 153 million driver's licenses, and that the FBI's New Orleans field office opened an official investigation into an apparent breach involving idscan.net, a New Orleans identity verification vendor. The attribution of the images to idscan.net is inferential in the reporting, resting on timestamp correlation between listed scans and a Hertz rental and a Planet13 dispensary rather than on a vendor confirmation. Krebs writes that idscan.net said it was investigating the matter but has not shared an official statement or a substantive reply to emailed questions, and quotes Jillian Kossman of idscan.net saying "At this point I'm not able to share any additional information, but the updates you have provided have been welcome, and helpful to our team's investigation." A timestamped update on the article states that shortly after publication the Nexus service site vanished from the darkweb, its login page replaced with plain text reading "This service is no longer available."
- Why it matters: If the images did come from idscan.net, the exposure reaches every business that outsourced ID scanning to it, and the vendor's own trust page names Hertz, Target, FedEx and Caesars.
- Follow-up: Track whether idscan.net confirms a breach, whether the Nexus service returns under another address, and whether any listed customer notifies affected users.
send feedback on this story