Over 153 Million Driver's License Scans Reportedly Leaked From ID Verification Service
A significant data breach has reportedly exposed the personal identification data of a large portion of the American driving public. Cybersecurity researchers and threat intelligence firms have identified a cache of over 153 million driver's license scans appearing on dark web marketplaces, with initial analysis suggesting the source may be a Louisiana-based identity verification service.
The exposed data reportedly includes government-issued identification documents used for Know Your Customer (KYC) checks, which are standard practice across financial services, telecommunications, and other regulated industries. Such documents contain sensitive personal information including full names, addresses, dates of birth, and in many cases, photographs.
Federal authorities have acknowledged the incident, with the FBI confirming that an investigation is underway. The case highlights ongoing concerns about the security practices of third-party verification services that handle large volumes of sensitive identity documents on behalf of businesses.
Security experts note that the scale of this breach underscores the risks associated with the collection and storage of biometric and identity data by private sector vendors. The long shelf life of identity documents means those affected face potential risks for years, as the data can be used for identity theft, fraud, and social engineering attacks.
Organizations that utilize identity verification services are being urged to audit their data handling practices and evaluate the security posture of their third-party vendors.