More than 153 million scans of U.S. and Canadian driver’s licenses were recently put up for sale on the dark web, according to Engadget, citing cybersecurity journalist Brian Krebs. The documents were offered through a service called Nexus, which Engadget says also advertised medical cards, employment records and residence cards. The most important caveat: the source of the data has not been conclusively established in the provided reporting. Engadget says Krebs identified a hack of IDScan, a Louisiana-based identification verification company, as the likely source. The FBI has opened an investigation, and Engadget reports that the bureau’s New Orleans field office is involved. Krebs’ reporting is unusually direct because he was among the people whose documents were allegedly exposed. According to Engadget, Krebs learned of the database after being tipped that his own driver’s license was being used as a free sample to promote the marketplace. The operators provided him with a scan of his license, and Engadget says other victims also confirmed that their scans were accurate. Engadget also reports that the hackers showed Krebs a scan of Secretary of Defense Pete Hegseth’s driver’s license. The provided material does not say whether that scan came from the same acquisition path as the rest of the dataset, only that it was shown by the same operators in the course of Krebs’ reporting. The possible enterprise link is ID verification. Engadget reports that many victims had rented cars from Hertz, which uses IDScan for verification. The article also says IDScan’s client list includes Target, FedEx, Motorola and Jack Henry, though the provided reporting does not say that all of those companies’ customers were affected. Nexus appears to have gone offline since the data was advertised. Engadget says the service was originally promoted on a Russian cybercrime forum called Exploit, using Krebs’ license as a sample to attract buyers, and that the Nexus login page now says the platform is no longer available. That does not mean the underlying data is contained. Engadget notes that even if the documents are not currently being sold through Nexus, copies may still be circulating. For people whose identity documents were included, the risk is not limited to a password reset: driver’s-license scans can be used in account recovery, identity checks and fraud attempts where possession of an image is treated as evidence of identity. Who benefits: Cybercriminals benefit if verified document scans remain in circulation, because they can be repurposed for identity fraud and account-access attempts. Investigators and affected companies benefit from Nexus going offline, but that does not prove the data has been removed from criminal channels. Who's exposed: People whose license scans were included are exposed to misuse of their identity documents. Companies that relied on the suspected verification pipeline may face customer notifications, forensic reviews and reputational pressure if investigators confirm the source.