FBI Probes Leak of Millions of Driver's Licenses on Dark Web
Left 50%
Center 50%
Right 0%
1 left · 1 center · 0 right
What happened
Independent cybersecurity journalist Brian Krebs reported that a dark-web service called Nexus, advertised on a Russian cybercrime forum, claimed to be selling digital scans of more than 153 million U.S. and Canadian driver’s licenses plus tens of millions of other identity documents. Krebs said the files included full images with photographs, addresses, and document numbers; that his own Virginia license was offered as a free sample; and that he found a scan identified as Defense Secretary Pete Hegseth’s license along with IDs of other officials, with some records matching real-world presentations of identification at businesses such as Hertz and a Las Vegas marijuana dispensary. He cited embedded timestamps and infrared and ultraviolet images as pointing toward commercial identity-verification systems, including a possible connection to Louisiana-based IDScan.net, which said it was investigating but did not confirm a compromise; neither the company nor the FBI has publicly identified a source. On Wednesday the FBI said it was “aware of this report and is looking into the incident,” declining further details because of the ongoing investigation. After Krebs published, Nexus’s login page was replaced with a message that the service was no longer available, and the 153 million figure remained an operator claim rather than a total independently confirmed by the FBI.
Omitted — what each side leaves out
Unpacked
Left-leaning coverage is simply thinner: it reports an FBI look at a possible leak of millions of licenses and names Pete Hegseth, and stops there. Right-leaning coverage supplies the missing origin story, reporting that timestamps on stolen images matched IDs handed to Hertz and a Las Vegas dispensary, evidence Krebs tied to IDScan.net. Without that vendor trail, readers cannot tell whether this is a government database breach or private identity-verification machines feeding a dark-web shop.
Left-leaning coverage says the licenses "may have been leaked." Right-leaning coverage instead labels the operation a "scheme." One phrasing leaves the event sounding like a dump of unknown origin. The other treats it as theft from a live commercial feed.
Did any state motor-vehicle agency lose data, or were the scans taken only when private businesses copied customers' licenses?
Bottom line
The Hill never names a source for the scans. Daily Wire is where readers learn the trove was tied to IDScan.net retail checkers, not a DMV.
The receipts — 6 facts one side's coverage lacks
- Krebs found evidence the trove may be connected to IDScan.net, including Hertz timestamps seconds apart
- Nexus operators claimed more than 153 million drivers’ licenses
- The claimed license count rose by nearly 400,000 records in about 24 hours
- Some stolen records included infrared and ultraviolet images of licenses
- After Krebs published, Nexus’s login was replaced with a notice that the service was no longer available
- Zach Edwards matched his stolen license timestamp to a Planet 13 scan in Las Vegas
The Left View
Left-leaning coverage framed the story as an FBI investigation into a report that millions of driver’s licenses, including Defense Secretary Pete Hegseth’s, “may have been leaked” on the dark web. The accounts were short and did not independently develop the operators’ size claims, the named dark-web service, or the suspected commercial scanning source.
The Right View
Right-leaning coverage framed the episode as a “massive dark web scheme” that “could be one of the largest exposures of government-issued identification documents ever reported,” leading with Hegseth among those whose scans appeared and stressing Krebs’s verification of genuine documents, signs the advertised inventory was still growing, and clues tying images to commercial ID-check vendors used by major companies. It treated the FBI’s statement as the opening of an inquiry into what researcher Zach Edwards called a driver’s-license breach unlike any before, while noting that neither the operators’ totals nor a source had been officially confirmed.
Our Take (balanced)
Left-leaning outlets’ strongest argument is restraint: the FBI has only said it is “looking into” the report, and the leak is described as something that “may have” occurred, which tracks the absence of an official victim count. Right-leaning coverage’s strongest argument is the corroboration Krebs and Edwards described—real licenses appearing as samples, timestamps matching known ID scans, and extra UV/IR images typical of commercial authenticators—plus Edwards’s statement that “there’s never been a breach of drivers’ licenses at this scale.” The central unresolved tension is whether those verified fragments justify treating the operators’ 153 million figure and a single commercial pipeline as established fact, which the FBI has not done.
4 sources
- FBI investigating report of millions of driver’s licenses being leaked on dark web
- Pete Hegseth Among Millions Caught Up In Massive Dark Web Scheme
- Hack exposes more than 150 million U.S. and Canadian driver's licenses on dark web
- FBI investigating report of millions of driver's licenses being leaked on dark web
More stories
The week's bottom lines, in your inbox
One email a week: the five stories that mattered and what they actually mean. Free.