Data Security, Breach, Privacy, Incident Response, Threat Intelligence

FBI probes massive identity data breach affecting 170M North Americans

A modern illustration depicting a robotic hand typing on a keyboard beside a digital security interface, showcasing risks and alerts in a futuristic cybersecurity environment. Ledger

The FBI is reportedly investigating a significant data breach that may have compromised the personal information of up to 170 million North Americans, as outlined in Infosecurity Magazine. The breach was initially brought to light by investigative journalist Brian Krebs, who detailed the "Nexus" service operating on the Exploit Russian cybercrime forum.

The Nexus service allegedly offered access to digital scans of identity documents, including over 153 million driver's licenses primarily from American and Canadian individuals, along with other identification and medical cards. The operators claimed the data originated from a breach at a major identity verification company. While the Nexus service has since ceased operations, investigations have linked the data to IDScan.net, a New Orleans-based identity verification provider that is currently looking into the matter.

Experts warn that the compromised data, including birth dates, addresses, and government-issued ID numbers, cannot be changed like passwords, posing a lifelong exposure risk. This incident highlights the critical need for enhanced ID verification standards and for businesses to scrutinize their vendors' data retention and security practices.

Source: Infosecurity Magazine

You can skip this ad in 5 seconds