FBI Probes Service Selling 153M+ Drivers Licenses

	FBI Probes Service Selling 153M+ Drivers Licenses(krebsonsecurity.com)
	413 points by tatersolid 8 days ago \| 276 comments
	tl;dr: A dark web service called Nexus was selling scans of 153M+ US and Canadian drivers licenses, including those of high-ranking officials like Defense Secretary Pete Hegseth. KrebsOnSecurity traced the source to Louisiana-based idscan.net, an identity verification vendor used by Hertz, Planet13 dispensaries, and other major brands, based on timestamps matching victims' car rentals and dispensary visits. The FBI's New Orleans field office has opened an investigation, and the Nexus site went offline shortly after Krebs published the story.
	HN Discussion: ↑US should adopt cryptographic identity systems like public key infrastructure instead of ID scans ↑Companies should minimize data retention and delete verification data after use ↑Strict liability and financial penalties would force companies to secure and minimize data ↑Current ID verification processes are security theater that harm regular users while attackers bypass them ↑US lacks European-style regulations due to regulatory capture and corporate influence