FlagThis — Daily Cybersecurity Intelligence Briefing

The identity verification platform IDscan.net has suffered a major data exfiltration event targeting its image repository, resulting in the compromise of approximately 153 million driver's license records, 10 million identification cards, and millions of supplementary travel and medical documents. Threat actors utilized the Russian cybercrime forum 'Exploit' to coordinate the sale of this PII via the 'Nexus' dark web storefront. This breach constitutes a significant supply chain failure, as the stolen high-fidelity digital scans facilitate advanced impersonation attacks, deepfakes, and fraud involving Commercial Driver's Licenses (CDL). The FBI New Orleans Field Office is leading the ongoing federal investigation into the breach.