Rental Car ID Scan Appears on Dark Web Within Hours

A journalist's driver's license scan surfaced on a new dark web service called Nexus shortly after being scanned at a rental car company. Nexus reportedly offers over 153 million driver's licenses and other identity documents, including scans in infrared and ultraviolet spectrums. The FBI is said to be investigating the ongoing data breach.
The Nexus service reportedly grew rapidly, adding nearly 400,000 driver's license records in a single day, suggesting an active pipeline of newly harvested data. The availability of scans in infrared and ultraviolet formats is particularly notable, as these spectral captures could potentially help counterfeiters produce IDs that pass advanced verification checks. The service also listed various other identity documents, including government-issued Common Access Cards and medical cards, broadening the scope of potential exposure. The FBI is said to be investigating, and the service went offline shortly after the report was published, though the underlying breach may continue.
This breach could affect a wide swath of the public, as driver's licenses are among the most commonly held identity documents. The inclusion of spectral scans may enable more convincing counterfeit IDs, potentially undermining security at airports, border crossings, and financial institutions. Victims could face identity theft, fraudulent credit applications, or even physical security risks if their documents grant access to sensitive facilities. The rapid growth of the service suggests systemic vulnerabilities in how businesses handle identity verification data, which may prompt regulatory scrutiny and industry-wide reassessment of scanning practices.