Another Massive Data Breach Exposed Millions of Driver's License Numbers

A massive data breach has compromised millions of driver's license numbers across multiple US states, security researchers have confirmed. The breach, which appears to have originated from a third-party identity verification service used by several state DMVs, has exposed highly sensitive personal information.

The exposed data includes full names, addresses, dates of birth, and driver's license numbers, creating a perfect storm for identity theft and fraud. Security firm Mandiant, which conducted the forensic investigation, reported that the attackers exploited a vulnerability in the verification service's API to exfiltrate data over several months. The affected states include California, Texas, Florida, and New York, with preliminary estimates suggesting over 12 million records were stolen. State DMV officials have begun notifying affected residents by mail and are offering free credit monitoring services for two years. Law enforcement agencies, including the FBI and CISA, are investigating the breach. Cybersecurity experts warn that driver's license numbers are particularly valuable on the dark web because they can be used to open bank accounts, apply for loans, and even obtain fraudulent passports.