Brian Krebs, a cybersecurity journalist, reported that more than 153 million US and Canadian driver's licenses were available for purchase on the dark web through a service called Nexus. ^[1] An FBI spokesperson said on September 4, 2026, that the bureau is investigating a possible breach that may have exposed scans of millions of American driver's licenses. ^[2] Bloomberg News reported that a listing on the Russian-language cybercrime forum Exploit offered access to more than 160 million North American driver's licenses through a service called Nexus. ^[3] Both Planet13 and Hertz contracted IDScan for identity verification and ID-authentication services, which investigators suspect is the source of the leak. ^[4] The database contained information for U.S. Secretary of Defense Pete Hegseth, raising concerns about the security of high-level government officials. ^[5] The FBI's New Orleans field office opened an official investigation into the breach following the discovery. ^[6] Independent journalist Brian Krebs first reported the breach and confirmed the authenticity of some documents with nine people whose licenses were listed for sale. ^[7] The listing on Exploit referenced '160M+ USA DL/ID Scans + data' and the sellers also claimed to have more than 10 million other documents, including residency cards, medical cards and international identity documents. ^[8]