A suspected breach at a major identity verification provider may have exposed a vast collection of government-issued documents, including driver's licenses and passports used for real-world age and identity checks.
According to security journalist Brian Krebs, a newly surfaced identity search site called Nexus appeared on the dark web and claimed access to more than 150 million records from the United States and Canada. The site reportedly added hundreds of thousands of new documents each day, suggesting ongoing access to a large verification database.
Krebs said his own driver's license appeared in the searchable records, helping confirm the authenticity of the data. Security researcher Zach Edwards also found his ID among the exposed files. The reporting points to IDScan, a Louisiana-based identity verification company used by major brands to check millions of IDs each month.
The company said it was investigating the matter, while the FBI's New Orleans field office was also reported to be reviewing the case. The Nexus site went offline soon after the report gained attention.
The incident arrives as age-verification systems become more common across digital services, increasing the amount of sensitive identity data stored by private platforms. It also highlights the growing importance of secure, privacy-first verification models that can support trust in the digital economy. In the future, this could accelerate the shift toward safer, more decentralized identity technologies.
