GKRootWire
Security ICE Signs $2M Deal for Zero-Click Phone Hacking ToolSecurity Attackers Exploit Critical Elementor Pro Bug to Hijack WordPress SitesAI ChatGPT Goes Down, Serves 404 Errors to UsersAI ChatGPT and Codex Suffer Widespread OutageAI Google DeepMind's WeatherNext 3 Sharpens AI Weather ForecastingAI Google's New AI Weather Model Sharpens Storm ForecastsSecurity ICE Signs $2M Deal for Zero-Click Phone Hacking ToolSecurity Attackers Exploit Critical Elementor Pro Bug to Hijack WordPress SitesAI ChatGPT Goes Down, Serves 404 Errors to UsersAI ChatGPT and Codex Suffer Widespread OutageAI Google DeepMind's WeatherNext 3 Sharpens AI Weather ForecastingAI Google's New AI Weather Model Sharpens Storm Forecasts
Security

Massive Breach Reportedly Exposes 150 Million Driver's License Photos

A criminal marketplace claimed to be selling scans stolen from an ID verification service before abruptly going dark.

A site specializing in identity theft data claimed it had obtained more than 150 million driver's license photos lifted from a major ID verification provider. These services are widely used by banks, gig platforms, and online marketplaces to confirm that a new user's government ID is real before granting access to an account.

Shortly after the claims surfaced, the criminal site went offline, a pattern often seen when takedown efforts or law enforcement pressure force illicit marketplaces to disappear. The identity of the breached vendor has not been officially confirmed, and it's unclear whether the stolen data is genuine, partial, or recycled from older leaks.

If legitimate, this would rank among the largest known thefts of government ID imagery, the kind of data that's extremely difficult to invalidate since people can't simply reissue a new face or driver's license number the way they'd reset a password.

Why it matters: ID verification services sit at a uniquely sensitive choke point: they aggregate scans of real government documents at scale, making them high-value targets and a single point of failure for identity fraud across many downstream platforms. Consumers should watch for phishing or account-takeover attempts using stolen ID photos as leverage.

Sources: TechCrunch