Nexus is not a data breach — it's a storefront. Over 153 million driver's licenses listed for sale, each bundled with infrared and ultraviolet captures: exactly the formats needed to clone an ID that passes hologram checks.
The entry point, in at least one documented case, was a car rental counter — scan at check-in, listed within hours. KrebsOnSecurity found journalist Brian Krebs, his mother, an FBI assistant director and several security researchers in the database. The inventory also includes government building-access cards (
CAC), medical cards and employment authorizations. The FBI is investigating; the service keeps growing.The risk model has shifted: a stolen physical document used to give one person one copy — here any buyer gets a full cloning package. Every business that scans an ID is a potential link in that chain.
Ars Technica