FBI Probes Service Selling 153M+ Drivers Licenses (krebsonsecurity.com)

Article summary

A new identity theft service on the dark web is selling digital scans of over 153 million drivers licenses from the US and Canada. The data appears to have been obtained from a breach at a widely-used identity verification company based in Louisiana, which has clients including Hertz, Target, and marijuana dispensaries. The FBI has launched an investigation into the breach. The service has since been taken offline, but not before it was discovered and reported on.

Main themes

• identity theft
• data breach
• regulation
• security measures
• identity verification
• surveillance
• privacy concerns

What commenters say

• The collection and storage of sensitive identification data by third-party services is a significant security risk.
• Regulations and laws should be put in place to prevent the collection and storage of sensitive identification data.
• The use of identity verification services is often required by law, making it difficult for companies to avoid collecting sensitive data.
• Deleting collected data after verification is not enough to prevent breaches, as copies of the data can still be made.
• The lack of oversight and security measures in the identity verification industry is a major concern.
• There is a need for a more secure and decentralized system for identity verification.
• Punitive measures such as fines and criminal charges should be imposed on companies that fail to protect sensitive data.
• The current system of identity verification is flawed and allows for mass fraud and surveillance.