IDScan.net

Stories

Researcher recovers hidden verification keys from driver's license barcodes

Confirmed breach affecting 153 million driver's licenses

New York and Virginia sign their driver's license barcodes cryptographically but never published the verification keys, so only their DMVs could check authenticity. A security researcher just derived both keys mathematically from the signatures themselves. Now anyone can build a verifier without state cooperation.

Updated Sep 17

Hackers had a live feed of a U.S. ID-scan company's data for over a year

New Capabilities

Suspected source of the leaked data; has not confirmed unauthorized access

A dark web service called Nexus has been selling scans of more than 153 million driver's licenses from the U.S. and Canada. The images match the work of IDScan.net, a Louisiana company that verifies IDs for Hertz, Target, FedEx and others.

Updated Sep 7