Nexus Service Lists 153 Million Drivers License Scans from Louisiana Identity Firm Breach

The service began advertising on the Russian forum Exploit in late August with samples including Virginia journalist Brian Krebs license and Defense Secretary Pete Hegseth record. Records include front back infrared and ultraviolet images with timestamps. Daily uploads added nearly 400000 new entries in 24 hours. Searches return 11.5 million pages confirming scale across 49 states and Canadian provinces with Ontario holding 473673 records.

Source metadata shows notations CDL and CAC alongside marijuana dispensary cards and medical IDs. Timestamps align with 2025 travel dates for scanned individuals indicating collection during identity verification events. The Louisiana firm supplies Fortune 500 clients and government agencies for KYC processes. No vendor has confirmed the compromise despite the FBI New Orleans field office opening an inquiry.

Patterns match prior breaches at identity platforms where image archives were siphoned for resale rather than immediate fraud. Infrared and ultraviolet layers enable forgery of secure documents at scale. Operational impact includes elevated synthetic identity risk for financial services and travel systems that rely on these scans for onboarding.

Next steps center on attribution of the Louisiana vendor and potential takedown of Nexus infrastructure. Regulators may require breach notifications to affected individuals once the source is confirmed.