FBI Probes Service Selling 153M+ Drivers Licenses (krebsonsecurity.com)

38 points by tatersolid 4 hours ago

fishfasell 35 minutes ago

So an online identity verification service had millions of IDs exfiltrated, many of which were linked to marijuana dispensaries? Oh man, my ID is definitely out there, shit.

wahern 26 minutes ago

Your ID and PII was likely already on the black market, the only question is accessibility and price. You can't exactly advertise on Reddit or sell to every two-bit identity thief and not expect heat.

cute_boi 29 minutes ago

I don’t know why the government allows websites and these craps to collect sensitive information like driver’s licenses and Social Security numbers. They could simply provide an API that allows websites to verify someone’s identity using a zero-trust approach without exposing the actual documents.

jakevoytko 34 minutes ago

As always, friendly reminder to lock your credit and enable your mobile carrier's protections against SIM swapping

fishfasell 31 minutes ago

Excellent advice. A compromised phone number is an absolute nightmare, most MFAs default to SMS as a last resort. I lost my Okta verify login at work since I transferred phones, thought I'd need a ticket with our ID team but turns out my phone number is sufficient. Wasn't thrilled about that.

FpUser 9 minutes ago

So they want to see my driver's license "to make the world safer" when in reality all they do is facilitating mass fraud. When the fuck will those brainless infusoria will get punished 9fat chance).