RCMP Monitoring FBI Probe Into Alleged Exposure of Millions of Canadian and US Drivers’ Licences

The Royal Canadian Mounted Police is monitoring reports of a major alleged data breach involving millions of drivers’ licences and other identity documents belonging to people in Canada and the United States.

Canadian police said they are aware of reports surrounding an investigation by the Federal Bureau of Investigation into claims that digital copies of government issued identification documents were being offered for sale on the dark web.

The FBI reportedly began investigating the matter on September 2 after cybersecurity journalist Brian Krebs reported discovering a hidden online marketplace allegedly offering scans of millions of drivers’ licences.

The website reportedly appeared after being promoted on a Russian cybercrime forum. Krebs said his own driver’s licence was allegedly presented as a sample to demonstrate the information available through the service.

The database was reportedly known as Nexus and was said to contain a vast collection of sensitive personal information. In addition to drivers’ licences, the database allegedly included other identification documents, travel records and hundreds of thousands of medical records connected to individuals in Canada and the United States.

Krebs said he was able to verify information associated with nine individuals before the dark web site disappeared. The verification raised concerns about whether the material being advertised represented genuine personal records obtained through unauthorized means.

The full origin of the information and the number of Canadians potentially affected remain unclear. Authorities have not publicly confirmed that the alleged database represents a single breach or established how the information may have been obtained.

If the reported scale of the exposure is confirmed, the incident could represent one of the largest known disclosures of government issued identity documents involving North America.

The RCMP said it is continuing to monitor developments and remains in contact with law enforcement and cybersecurity organizations in Canada and other countries.

Canadian police have not provided details about whether a separate domestic criminal investigation has been launched. The RCMP also declined to comment on investigations being conducted by international law enforcement agencies.

The reports have raised renewed concerns about the risks associated with stolen identity information being traded through criminal online networks. Drivers’ licences contain personal details that can potentially be used in identity theft, financial fraud and other forms of criminal activity.

Canadian residents are being encouraged to remain alert for unusual activity involving their personal information. The RCMP recommends regularly checking financial accounts and government related accounts for transactions or activity that the account holder does not recognize.

Anyone who believes they may have been targeted by fraud should report the matter to their local police service and the Canadian Anti Fraud Centre.

The investigation remains ongoing, and authorities have yet to establish the complete scope of the alleged exposure, how the information was obtained or how many individuals in Canada may have been affected.

For now, the RCMP says it is maintaining contact with domestic and international partners as authorities work to determine the credibility and extent of the reported data breach.

Courtesy: ctvnews