The timing of newly out there scans—usually inside a day, if not hours, of me and a small pattern of different victims presenting them at rental corporations or others—seemingly signifies that Nexus has close to real-time entry to information flowing by the third-party scanning service these companies are utilizing. Over a span of 24 hours, Krebs mentioned the variety of driver’s licenses listed as out there grew by virtually 400,000. That’s one other indication that the breach has been ongoing and new playing cards turn out to be out there shortly after they’re harvested.
Using publicly out there data, Krebs discovered that IDScan.internet, a New Orleans-based ID scanning service, has introduced an unique association with Planet13. It additionally listed Hertz and 11 different corporations as utilizing its companies. IDScan.internet went on to say that its scans seize each infrared and ultraviolet spectra.
Representatives from IDScan didn’t instantly reply questions despatched by e mail. An IDScan.internet spokesperson informed Krebs the corporate is investigating. My automobile rental firm representatives additionally didn’t instantly reply questions.
The availability of my driver’s license to anybody keen to cough up a payment isn’t precisely a comforting thought. Yes, my private particulars—together with present and former addresses, Social Security quantity, demographics, and extra—have been breached earlier than, simply as they’ve for hundreds of thousands, if not billions, of others all over the world.
This dump is extra troubling due to the purported availability of scans in ultraviolet and infrared. Fortunately, Nexus went darkish inside hours of the KrebsOnSecurity scoop, though that additionally means there’s no manner for individuals to verify if their IDs are included. Also considerably consoling is the continuing investigation by the FBI.