FBI Investigates Alleged Driver’s License Theft Linked to Nexus Dark Web Service
The FBI is investigating an alleged black market operation that sold stolen driver’s license records. This investigation is being closely followed due to the potential national security and identity theft risks involved. Fox News correspondent Jennifer Griffin reports on the unfolding situation.
The Nexus Dark Web Service
Nexus, a dark web service, claimed to have collected over 153 million driver’s license records from the US and Canada. Besides driver’s licenses, the service reportedly accumulated over 10 million identification cards, 3 million travel documents or international IDs, and at least 579,000 medical cards. While these numbers from Nexus have not been independently verified, they have nonetheless raised significant concerns.
Investigations and Findings
Reports indicate that Nexus appeared on a Russian-language cybercrime forum called Exploit. The service claimed to offer access to identity documents for over 170 million North Americans. Testing of Nexus returned millions of search entries, suggesting a vast database. However, it remains uncertain how many unique individuals were affected.
Researchers traced the origins of the driver’s license scans through timestamps. Some images contained timestamps aligning with instances when individuals presented their licenses for travel or other activities. These findings suggest that the data may not solely originate from specific events such as airport security checks.
Links to IDScan.net
Investigators identified potential connections to IDScan.net, a Louisiana-based company specializing in identity verification. IDScan.net confirmed a security incident but has not definitively linked the Nexus data to its systems. The company’s scanners can capture IDs using ultraviolet, infrared, and white light, which was similar to the scans found among the Nexus records.
FBI Confirms Examination
The FBI confirmed its ongoing examination of the incident. Reuters suggests that if the reported scale is accurate, this breach could be one of the largest exposures of government-issued identity documents in North America. After KrebsOnSecurity’s report, the Nexus website disappeared, yet the fate of the stolen records remains unknown.
Potential Problems from Stolen Driver’s Licenses
Criminals can use stolen driver’s licenses for convincingly impersonating others. Information like full name, address, date of birth, and driver’s license number becomes especially concerning when validating identities remotely or in-person. Unlike other information, your identity details are tough to replace.
Steps for Mitigating Identity Theft
- Freeze Your Credit: Contact Equifax, Experian, and TransUnion to initiate a free credit freeze, which helps prevent new credit account theft.
- Review Your Credit Reports: Regularly inspect your credit reports for unfamiliar accounts or inquiries.
- Monitor Existing Accounts: Utilize transaction alerts and monitor for changes in your bank and credit accounts.
- Secure Email and Phone Accounts: Use strong passwords, enable multifactor authentication, and secure your mobile account with a PIN.
- Consider Identity Theft Protection: Services can monitor your identity and provide assistance if fraud occurs.
- Act Quickly Upon Identity Misuse: Report to IdentityTheft.gov and contact your state motor vehicle agency if a driver’s license is compromised.
It’s important to protect what you can. Consider freezing your credit, monitoring accounts, and using identity theft services for added protection.