# Massive leak of global KYC documents for sale on Nexus; FBI investigates

Source: https://arstechnica.com/security/2026/09/my-drivers-license-is-one-of-153-million-for-sale-on-a-new-dark-website
Kiwi News: https://news.kiwistand.com/stories/Massive-leak-of-global-KYC-documents-for-sale-on-Nexus-FBI-investigates?index=0x6a98df73769e15bb09bf4868c3b988440443574640f63f48a44821ed8318df42f2057a14
Submitted by thatalexpalmer.eth on 2026-09-03 UTC, 4 upvotes, 1 comment

## Summary

Driver's license scans from rental companies and other businesses are reportedly for sale on a marketplace called Nexus, and the FBI is investigating. Krebs reported that the number of licenses listed as available grew by almost 400,000 over 24 hours, with new scans appearing shortly after they were harvested. IDScan.net, a New Orleans-based ID scanning service listing Hertz and 11 other companies as users, told Krebs it is investigating. Its scans reportedly capture infrared and ultraviolet spectra. Nexus went offline within hours of the KrebsOnSecurity report, so people cannot check whether their IDs are included.

## Article

The timing of newly available scans—typically within a day, if not hours, of me and a small sample of other victims presenting them at rental companies or others—likely means that Nexus has near real-time access to data flowing through the third-party scanning service these businesses are using. Over a span of 24 hours, Krebs said the number of driver’s licenses listed as available grew by almost 400,000. That’s another indication that the breach has been ongoing and new cards become available shortly after they’re harvested.

Using publicly available information, Krebs found that IDScan.net, a New Orleans-based ID scanning service, has announced an exclusive arrangement with Planet13. It also listed Hertz and 11 other companies as using its services. IDScan.net went on to say that its scans capture both infrared and ultraviolet spectra.

Representatives from IDScan didn’t immediately answer questions sent by email. An IDScan.net spokesperson told Krebs the company is investigating. My car rental company representatives also didn’t immediately answer questions.

The availability of my driver’s license to anyone willing to cough up a fee isn’t exactly a comforting thought. Yes, my personal details—including current and former addresses, Social Security number, demographics, and more—have been breached before, just as they have for millions, if not billions, of others around the world.

This dump is more troubling because of the purported availability of scans in ultraviolet and infrared. Fortunately, Nexus went dark within hours of the KrebsOnSecurity scoop, although that also means there’s no way for people to check if their IDs are included. Also somewhat consoling is the ongoing investigation by the FBI.

## Comments

**thatalexpalmer.eth**: https://x.com/unusual_whales/status/2095275959352185204?s=46