Alleged ShinyHunters member Saif al-Din Khader, detained in Jordan on Tuesday, is helping the FBI find other members, two sources told Reuters. A new ShinyHunters leak site went up two days later, suggesting other members still run the extortion.
Perspective Coverage
13 publishers
- Builder
- Builder 14%
- Operator
- Operator 74%
- Investor
- Investor 12%
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+20
- Incentives60
- Confidence62
Brian Krebs reports a hacker selling searchable access to 153 million US and Canadian licences, with suspicion pointing at the vendor IDScan.net. Any age gate built on a document scan owns that exposure.
Perspective Coverage
7 publishers
- Builder
- Builder 26%
- Operator
- Operator 56%
- Investor
- Investor 18%
Reality
- Evidence62
- Adoption66
- Hype gap+22
- Incentives50
- Confidence60
Every company that outsourced KYC document capture now owns an exposure it never inventoried, because the images being sold appear to come from the verifier rather than from any of its customers. The FBI opened the file in New Orleans.
Perspective Coverage
7 publishers
- Builder
- Builder 23%
- Operator
- Operator 49%
- Investor
- Investor 28%
Reality
- Evidence62
- Adoption65
- Hype gap+15
- Incentives55
- Confidence60
IDScan.net says an unauthorized third party may have accessed or copied full names and government-issued ID numbers from customer accounts on its cloud, after 153 million driver's licenses appeared for sale on a dark web site.
Perspective Coverage
5 publishers
- Builder
- Builder 17%
- Operator
- Operator 65%
- Investor
- Investor 18%
Reality
- Evidence68
- Adoption70
- Hype gap+28
- Incentives60
- Confidence64
The company says it learned on or around September 1 that data in customer accounts on its cloud may have been copied, and its notice lists names and ID numbers but not the licence scans Nexus was selling.
Perspective Coverage
6 publishers
- Builder
- Builder 17%
- Operator
- Operator 52%
- Investor
- Investor 31%
Reality
- Evidence74
- Adoption62
- Hype gap+14
- Incentives71
- Confidence70
Four class actions hit IDScan.net over the 153 million licences Krebs linked to it
The vendor runs more than 21 million document checks a month for clients including Hertz, GameStop and FedEx, and the plaintiffs suing in New Orleans infer their own exposure from a car rental because nobody has told them otherwise.
Reality
- Evidence46
- Adoption52
- Hype gap+18
- Incentives68
- Confidence44
IDScan.net is notifying people about names and ID numbers and offering credit monitoring, while the records Brian Krebs examined each carried infrared and ultraviolet captures, the layer that document authentication actually tests.
Perspective Coverage
4 publishers
- Builder
- Builder 22%
- Operator
- Operator 59%
- Investor
- Investor 19%
Reality
- Evidence82
- Adoption68
- Hype gap+12
- Incentives55
- Confidence76
Nexus advertises 153 million driver's license scans with infrared and UV captures
KrebsOnSecurity traced the records toward New Orleans ID-verification vendor IDScan after nine people matched timestamps on their stolen scans to the day they handed a license over. The FBI's New Orleans field office says it is looking into the incident.
Reality
- Evidence58
- Adoption60
- Hype gap+14
- Incentives70
- Confidence54
Krebs traces infrared license captures on a dark web market to a vendor scanning 21 million IDs a month
The infrared and ultraviolet captures a bank reads to prove a license is genuine were reportedly on sale beside the ordinary scans, which leaves the cheapest step in account opening deciding nothing on its own.
Reality
- Evidence57
- Adoption62
- Hype gap+12
- Incentives72
- Confidence52
Krebs traced 153 million leaked driver's licence scans to a single Louisiana ID verifier
IDScan.net sells the compliance layer behind age and ID checks at thousands of dispensaries and at Hertz, and Techdirt notes its trust page stayed up for days after the dark web store opened. The FBI is now asking where the images came from.
Reality
- Evidence44
- Adoption66
- Hype gap+26
- Incentives71
- Confidence52
AFP charges two men near Perth over the self-spreading worm behind the TeamPCP compromises
Two suspects in Western Australia are in custody over the supply-chain worm that hit Trivy, KICS, LiteLLM and Telnyx. The 500,000 credentials it harvested stay valid until someone rotates them. Only 78,000 have surfaced publicly.
Reality
- Evidence50
- Adoption62
- Hype gap+14
- Incentives45
- Confidence52
World open-sources ProveKit to keep age checks on the user's own phone
The toolkit proves a fact such as being over 18 without the document leaving the handset, which is the opposite of the vendor model behind 153 million stolen licence scans, and so far no regulator has confirmed that it accepts this method as valid proof.
Reality
- Evidence36
- Adoption18
- Hype gap+33
- Incentives84
- Confidence33
Flare traced TeamPCP's GitHub handle to a HackerOne profile carrying a real name
Australian Federal Police arrested two men over malicious code the agency estimates reached more than 1,000 organisations. What identified the alleged leader was a screen name he kept using on other platforms.
Reality
- Evidence45
- Adoption52
- Hype gap+18
- Incentives62
- Confidence55