FBI investigates as hackers sell digital scans of 153M drivers licenses

The reported sale of more than 153 million driver’s license scans from a breached identity verification provider is a major third-party security and fraud risk, with potential downstream exposure for enterprises that rely on digital onboarding, KYC, or customer verification workflows. For CIOs and technology leaders, the incident underscores that identity proofing vendors have become high-value targets and that a compromise at this layer can create legal, operational, and reputational fallout across multiple business units and customers. IT organizations should treat identity data as highly sensitive, tighten vendor risk management, and reassess how much personal data is collected, retained, and transmitted to verification partners.