RismadarVoice Reporters
September 3, 2026
The United States Federal Bureau of Investigation (FBI) has launched an investigation into reports of a major data breach allegedly involving tens of millions of driver’s licenses belonging to residents of the United States and Canada.
The FBI confirmed on Wednesday that it was reviewing the incident but said it could not provide further details because the investigation was ongoing.
The investigation followed a report by cybersecurity journalist Brian Krebs, who said he discovered a dark web platform allegedly offering digital copies of millions of government-issued identification documents.
According to Krebs, the website, identified as Nexus, claimed to possess large volumes of driver’s licenses from the US and Canada, as well as other identification documents, travel records and medical information.
Krebs said he verified the authenticity of some of the data by confirming details with nine individuals whose documents were reportedly listed on the platform. He added that the website appeared to be receiving new stolen information in real time, suggesting that the source of the data may have involved an active breach.
Cybersecurity researcher Zach Edwards of Infoblox described the reported incident as unprecedented in scale, saying the exposure of driver’s licenses at such a level had not previously been recorded.
The FBI has not confirmed the number of affected individuals or identified the source of the alleged stolen information.
Reports indicated that the dark web platform was promoted on a Russian cybercrime forum before disappearing shortly after Krebs published details of the investigation.
The possible breach has raised concerns over potential identity theft, financial fraud and misuse of personal information, particularly because driver’s licenses contain sensitive details used for identity verification.
Krebs said the identity verification company IDScan.net was investigating possible links to the incident after being contacted for information. The company, however, did not immediately respond to requests for comment.
Authorities are expected to continue investigations to determine the origin of the data, the number of affected individuals and possible measures to protect those whose information may have been exposed.
