Hegseth License Appears in Alleged 153 Million-ID Leak

A driver’s license belonging to Defense Secretary Pete Hegseth was reportedly found in a dark-web database advertised as containing more than 153 million U.S. and Canadian license records, turning a sprawling identity-theft investigation into a national-security embarrassment.

The FBI is examining the incident after cybersecurity journalist Brian Krebs reported that a service called Nexus was selling searchable government-ID scans on a Russian-language cybercrime forum. Krebs found his own license in the collection, along with documents belonging to people he knew, and matched timestamps on several records with recent trips and identity checks.

The alleged database reportedly included front-and-back license images, plus infrared and ultraviolet scans used by verification systems to test whether documents are genuine. That detail matters. A stolen image is not merely a static copy of an ID. Combined with names, addresses, birth dates and information from earlier breaches, it can help criminals defeat remote onboarding checks, impersonate customers at financial institutions or create convincing counterfeit documents.

The Pentagon itself has not been identified as the source of the breach. IDScan.net, a Louisiana-based identity-verification provider, said on September 4 that an unauthorized party may have accessed or copied customer information stored in its cloud. The company has not confirmed that 153 million distinct people were affected, and the alleged Nexus count remains a claim rather than a completed forensic tally.

IDScan.net said the exposed information may include full names and driver’s-license or other government-issued identification numbers. It is notifying potentially affected individuals and offering free credit monitoring and identity-protection services. The company also said it is cooperating with federal investigators.

The Pentagon has faced a separate identity-record problem this month involving roughly 215,000 service members whose personnel files lacked required proof-of-identity documents. Officials said that issue was administrative and showed no evidence of fraud or a data breach. The two matters should not be conflated.

Consumers do not need to wait for a formal notification before taking basic precautions. A credit freeze with Equifax, Experian and TransUnion can block most new-account applications, while a fraud alert adds a warning flag for lenders. Review credit reports, bank statements and password-reset notices for anything unfamiliar, and report suspected identity theft through IdentityTheft.gov.