I rented a car, and within hours, my driver’s license was for sale

Summary

A driver's license scan, obtained after renting a car, was found for sale on a dark web service called Nexus. This service offers over 153 million IDs, including various government and identification cards, with scans in infrared and ultraviolet spectrums. The FBI is investigating, and the service went offline shortly after the report was published.

Key Takeaways

1. A driver's license scan, obtained after renting a car, was found for sale on a dark web service called Nexus.
2. Nexus offered over 153 million IDs for sale, including driver's licenses, identification cards, and government-issued cards, with scans in multiple spectrums.
3. The FBI is investigating the data breach, and the Nexus service went offline shortly after the report was published.

Statement Breakdown

• Claimed Facts: 60% of statements the article presents as facts
• Opinions: 30% of statements classified as editorial or subjective
• Claims: 10% of statements surfaced for additional reader evaluation

Credibility & Bias Reasoning

Credibility assessment: The article relies on a reputable security journalist's report and mentions an FBI investigation, lending it credibility. However, it also includes personal anecdotes and speculative reasoning about data sources, slightly reducing its overall score.

Bias assessment: Security-Focused Narrative. The article's primary focus is on the security implications of a data breach, framing the events through the lens of potential identity theft and the vulnerabilities of data handling practices. It highlights the technical aspects of the stolen data and the methods of its sale.

Note: This article presents findings from an investigative report on a data breach. While credible, it includes personal experiences and speculative elements that readers should consider.

Credibility flag: Investigative Report

Claimed Facts (6)

• This is a direct statement of an event that occurred.
• This quantifies the scope of the data breach.
• This describes the technical details of the stolen data.
• This is a factual report about an ongoing investigation.
• This provides a metric for the rapid growth of the data breach.
• This states a business arrangement between two entities.

Opinions (5)

• This is a speculative statement about the potential use of the data.
• This is an interpretation of the data growth.
• This expresses a personal feeling and subjective reaction.
• This is a generalized statement reflecting a common experience and opinion on data breaches.
• This expresses a comparative judgment and personal concern.

Claims (5)

• The use of 'may be short for' indicates speculation rather than a confirmed fact.
• The use of 'may refer to' indicates uncertainty about the meaning of the notation.
• The claim is attributed to Nexus, which is the service being investigated, and is presented without independent verification within the article.
• This is a reported statement from an unnamed victim, lacking direct verification.
• While the service going dark is likely factual, the 'fortunately' implies a subjective positive framing of a negative event (loss of ability to check).

Key Sources

• Dan Goodin — Author
• KrebsOnSecurity — Security Journalism
• Brian Krebs — Journalist
• Planet13 — Dispensary Chain