A new dark web platform called Nexus claimed to be selling 153 million driver’s license scans and millions of other identity and medical cards.
The collection included more than 153 million driver’s licenses, 10 million ID cards, 3 million travel documents, and 579,000 medical cards, including marijuana dispensary cards, according to reports.
The trove of driver’s license scans reported by KrebsOnSecurity is a sharp reminder that identity verification is not a harmless box-ticking exercise.
The FBI’s New Orleans field office has opened an investigation into an apparent breach involving identity verification provider IDScan.net. The company said it was investigating.
Read more…
Source: MalwareBytes Labs
Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox
Related:
- Qantas among list of major airlines impacted in global cyber security breach
November 2, 2026
Qantas and multiple other airlines have been targeted in a cyber security breach, with the Australian airline now working to determine what information was obtained. Client of Qantas, Spanish travel company Amadeus – which provides travel technology for global airlines, hire cars and hotels – was breached by an unauthorised agent, potentially accessing data about passenger ...
- Massive GovTech breach leaks 42 million documents — including thousands packed with personal information
October 30, 2026
Researcher finds exposed database containing 42 million documents and hundreds of thousands of records with personal data. The CitySourced-linked repository exposed names, contact details, complaint reports, and internal records for years. Database was secured after disclosure, highlighting ongoing risks from misconfigured cloud storage. Read more… Source: TechRadar News Sign up for the Cyber Security Review Newsletter The latest cyber security news ...
- North Korean hackers blamed for stealing record $6.3B in Binance breach
October 30, 2026
Hackers working for the North Korean regime have been blamed for a record cryptocurrency heist following a cyberattack at crypto exchange Binance. The hackers stole at least $6.3 billion in crypto from the company’s wallets, though about half of that amount was frozen as the stolen crypto traveled across various blockchains, according to security researchers. The ...
- Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat
October 28, 2026
GMO warned customers to back up data, disconnect devices, and shut down systems after a cyberattack. Attackers allegedly stole customer data, leaked information, and threatened ransomware deployment. Compromised trading-platform credentials and reports of unauthorized transactions raised concerns for affected users. Read more… Source: TechRadar News Sign up for the Cyber Security Review Newsletter The latest cyber security news and insights delivered ...
- Data breach at Sony ISP subsidiary exposes 2.5 million customer records as Japan hit with another major cyberattack
October 28, 2026
A subsidiary of Sony Network Communications, the Japanese tech giant’s Internet Service Provider (ISP) arm, has confirmed suffering a data breach which saw it lose sensitive data on roughly 2.5 million people. Among the stolen files were people’s phone numbers, email addresses, and in some cases – email passwords. The company confirmed the news in an apology ...
- Patient records exposed in Quest breach
October 26, 2026
Quest Diagnostics has confirmed that an unauthorized party accessed a system healthcare providers use to order laboratory tests and view results, affecting personal information and patient records. Quest is a major US laboratory testing company whose services help healthcare professionals diagnose and monitor medical conditions. Those services range from routine laboratory testing to specialized testing in ...