Massive Exfiltration of 153M+ Driver's License Scans from Unnamed Louisiana-Based Identity Verification Firm

A massive-scale exfiltration involving over 153 million high-fidelity digital scans of driver's licenses has been identified from a Louisiana-based identity verification provider. The compromised dataset includes high-resolution identification documents from the United States and Canada, which have surfaced on a newly established dark web identity theft service. Because the stolen data consists of digital images rather than simple text, it presents a critical risk for bypassing Know Your Customer (KYC) and automated identity verification protocols through advanced spoofing. The FBI's New Orleans field office has launched a formal investigation to determine if the breach resulted from API exploitation, cloud storage misconfigurations, or an insider threat.

• Incident Overview: Breach Scale and Scope
  • Magnitude: Exfiltration of 153,000,000+ high-fidelity digital scans.
  • Geographic Reach: Extensive documentation coverage spanning the United States and Canada.
  • Distribution: Data is currently being marketed via specialized dark web identity theft marketplaces.
• Technical Analysis: Data Integrity and Exploitation Vectors
  • Payload Characteristics: High-resolution image files which facilitate advanced identity spoofing/deepfakes.
  • Suspected Vectors: Investigation into API exploitation, cloud storage misconfigurations, or insider threat models.
  • Forensic Focus: Analysis of file naming conventions and metadata to validate record uniqueness and integrity.
• Threat Profile: Impact on KYC and Fintech Sectors
  • Targeted Sector: Identity Verification (IDV), Fintech, and highly regulated KYC service providers.
  • Systemic Risk: High potential for fraudulent account creation and circumvention of automated document verification.
  • Attack Mechanics: Use of high-fidelity scans to bypass biometric and liveness detection protocols.
• Investigative Status: Law Enforcement and Defensive Response
  • Law Enforcement: Formal inquiry initiated by the FBI's New Orleans field office.
  • Intelligence Goals: Identification of threat actors and determination of the primary exfiltration pathway.
  • Defensive Action: Security professionals should audit KYC workflows for vulnerabilities to high-fidelity document spoofing.