MANY MINDEDDark Web Service Sells 153M+ Drivers Licenses, Fueling Identity Theft Risks
Nexus, a dark web identity theft service advertised on the Russian cybercrime forum Exploit, claims to hold 153 million drivers licenses from the United States and Canada. The service includes 10 million identification cards, 3 million travel documents, and 579,000 medical cards. Its records show timestamps from June 2025 onward, with 400,000 new license records added daily. Multiple users confirmed their licenses appear in Nexus with timestamps matching rental car transactions at Hertz, and security researcher Zach Edwards’ license is listed with DEFCON conference travel dates. The service displays six image files per license (front/back photos, scans, infrared, ultraviolet) and includes records with source notations like CDL and CAC.
The service’s data exfiltration is ongoing, as evidenced by the 400,000 daily increase in records. While the 153 million figure is claimed but not independently verified, user tests and search mechanics—such as 11.5 million pages of results (15 per page) with Canadian records concentrated in Ontario—provide concrete verification pathways. The FBI launched an official inquiry into the source on September 1, 2026.
This friction in financial security directly threatens access to essential services. Identity theft via such services can block individuals from obtaining care, goods, or other necessities by creating barriers to verification. The ongoing exfiltration and real-world evidence of compromised licenses mean vulnerable populations face immediate risk of service denial.
What to watch: The FBI’s investigation, Nexus’s daily record growth, and whether timestamped records can be traced to specific users. The 153 million figure remains unverified by independent sources, but the service demonstrates active exploitation through user evidence and search mechanics.
Source: Krebs on Security