Submitted 5 days ago by daveyOsborn@infosec.pub to cybersecurity@infosec.pub
https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
From the article:
“it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana.”
Worth noting that 5 US states (e.g. Florida) have stopped issuing standard drivers licenses and effectively force their residents to obtain a “Real ID” which includes additional data – which of course makes more sensitive data available to cybercriminals.
the timestamp on my license scan corresponds to a date in June 2025 when I took a flight to the midwest United States to attend a family funeral
Jesus fuck. I guess that’s something you can’t opt out of? I want to know who took that photo: the airline or TSA.
The source brought it to my attention because the proprietor of this identity theft service offered my Virginia drivers license as a free sample in their initial sales thread on Exploit.
Oh wow, this person knows how to do marketing.
Email Brian Krebs a copy of their license, and you’re gonna get some serious traffic.
Can we get eIDs now, please?
FWIW, here’s a good example of doing it poorly:
moldy_rice@piefed.keyboardvagabond.com 5 days ago
Yeah, this is why I refuse to buy from dispensaries that scan my ID card in any way.
If you want to see it with your eyes, that’s fine. I have no problem authenticating with a human. But as soon as you want to put it in front of a camera lens, that’s me walking out the door.