What is Nexus?
Nexus is a service that, as described in September 2026, claims to hold stolen identity documents sourced from an active breach at a major identity verification company. The main thread tracks the rapid growth of its driver’s license records and the assertions of its operators about how that data is obtained.
Release history
- Sep 2026 - Dave Bittner said the people behind Nexus claim the images come from an active breach at a major identity verification company.
- Sep 2026 - Bittner reported that within the prior 24 hours the number of driver’s license records on the service increased by nearly 400,000.
- Sep 2026 - Steve Gibson said the nearly 400,000-record single-day increase suggests freshly stolen license data is being harvested and uploaded on a semi-regular basis.
- Sep 2026 - Gibson quoted the operators’ claim that they have been continuously exfiltrating new data for over a year into a private database.
In the discourse
Attributed discussion of Nexus.
Nexus, a service selling driver's license images allegedly sourced from an active breach at a major identity verification company, merits close tracking as a fast-growing identity-fraud enabler.
“The people behind Nexus claim these images are coming from an active breach at a major identity verification company.”Dave Bittner · 10 Sep 2026
The Nexus dark-web identity theft service added nearly 400,000 new driver's license records in a single day, suggesting an ongoing active breach.
“Increased by nearly 400,000 in, in one day, suggesting, he writes, that freshly stolen license data is being harvested and uploaded to this service on a semi-regular basis.”Steve Gibson · 16 Sep 2026
The Nexus dark-web service added nearly 400,000 driver's license records within a single 24-hour window.
“Within the past 24 hours the number of driver's license records has increased by nearly 400,000.”Dave Bittner · 10 Sep 2026
Nexus: a dark-web identity theft service claiming continuous exfiltration of fresh driver's license data for over a year, with near-real-time uploads of hundreds of thousands of records per day.
“We have been continuously exfiltrating new data for over a year into our private database.”Steve Gibson · 16 Sep 2026