Driver’s License Data for Sale
BLUF
A compromised database of 153 million driver's licenses is actively being traded on the dark web, posing significant identity theft risks.
NEWS
Security researchers have identified a listing on the dark web offering a dataset comprising 153 million driver's license records for purchase. The breach likely stems from a state-level or aggregated DMV system compromise, as reported by Schneier on Security and detailed further by Brian Krebs. This represents one of the largest known exposures of government-issued identification data to date.
Why I Care
Affected individuals face heightened risks of identity theft, financial fraud, and synthetic identity creation using stolen credentials. Government agencies must address systemic vulnerabilities in data storage and access controls to prevent future mass exposures. The scale of the leak undermines trust in digital identification systems nationwide.
Next Steps
Individuals should monitor credit reports and consider placing fraud alerts immediately upon notification. State DMVs must audit their data security protocols and notify affected residents within 30 days. Organizations handling PII should review third-party vendor access controls by the end of the quarter.
Source: Schneier on Security ·