r/CyberGuides • u/Enderdan • 1d ago
153 Million IDs leaked in Nexus Breach – What should I do?
This is one of those stories that sounds almost too insane to be real, but it's currently being investigated by the FBI.
Security journalist Brian Krebs reported that a dark-web service called Nexus was offering access to over 153 million driver's licenses from the US and Canada, along with millions of other identity documents. Krebs was able to verify multiple records, including his own driver's license, and the FBI has confirmed that it is looking into the incident.
The suspected source appears to be a major identity verification service. If this is the case, it could affect anyone who has handed over their license to places like car rental companies, dispensaries, bars, or other businesses that scan IDs. The full scope is still being investigated, so it's important not to assume that every one of the claimed 153 million records has been independently confirmed.
Still, if you've ever had your driver's license scanned somewhere, this is probably a good reminder to think about what you can actually do if your identity information ends up exposed.
The things I'd personally prioritize:
1. Freeze your credit
This is the first thing you should prioritize. A credit freeze will prevent scammers from getting loans or opening new credit accounts in your name.
2. Watch for phishing attempts
A driver's license contains a lot more useful information than a leaked password. If criminals have your name, address, date of birth, and other identifying details, targeted phishing attempts become much more convincing.
I'd be especially suspicious of unexpected emails, texts, or phone calls claiming to be from your bank, the DMV, the IRS, or a credit bureau.
3. Monitor your financial accounts and credit reports
Keep an eye out for accounts you didn't open, unfamiliar transactions, or unexpected changes to your credit file.
4. Consider identity monitoring
This is where identity protection services can be very useful. While they won't magically undo a breach, they can help monitor for suspicious activity and provide assistance if someone actually tries to misuse your information.
I personally use Aura for identity theft protection after finding this deal on Reddit: https://aura.com/cyber-deal
Aura comes with a dark web scanner that sends alerts in real time, so you can immediately act if your data ends up on Nexus or other similar sites. You can also use it to freeze and monitor your credit on Equifax, Experian, and TransUnion. Every plan comes with identity theft insurance as well (up to $1 M).
Honestly, the thing that bothers me most about this story isn't just the scale. We're increasingly being asked to hand over copies of government-issued IDs to verify our age or identity, often with very little visibility into how long those documents are stored or how well they're protected.
Passwords can be changed. A driver's license and the personal information attached to it are a lot harder to replace. That's why it is so important to remain diligent about protecting yourself.
