FBI confirms probe into darkweb sale of millions of US, Canada driver's licenses

September 4, 2026 at 05:00 AM2 min

This digest was compiled by AI from multiple sources — links to the originals are below.

The FBI is investigating reports that millions of driver's licenses issued across the U.S. and Canada are being sold on the darkweb. Chris Pierson, CEO of BlackCloak, said the records are already in the hands of an organized criminal syndicate and will remain valid for up to a decade. The exposure collapses layers of anonymity for high-profile targets, including judges, lawmakers and corporate executives.

Key Facts

The FBI confirmed it is investigating reports that millions of driver's licenses issued across the U.S. and Canada are being sold on the darkweb.
Chris Pierson, CEO of BlackCloak, said the records are already in the hands of an organized criminal syndicate.
License images, issuance and expiration dates, and residential addresses will remain valid for up to a decade, according to Pierson.
Pierson cited the killing of UnitedHealthcare CEO Brian Thompson and the targeting of Minnesota state lawmakers at their homes as examples of converging cyber and physical risk.

The Investigation

The FBI has confirmed it is investigating reports that millions of driver's licenses issued across the U.S. and Canada are being sold on the darkweb. The incident may be one of the largest exposures of government-issued identity documents ever recorded in North America. Chris Pierson, CEO of BlackCloak and a veteran cyber advisor at the U.S. Department of Homeland Security, said the records are not speculative and are already in the hands of an organized criminal syndicate.

Identity Document Exposure

License images, issuance and expiration dates, and residential addresses are first-party identity records that stay accurate for years. Pierson said in many cases the records will remain valid for the next decade. High-profile targets who route mail through law firms or wealth advisers still list a real home address on a state-issued license, collapsing layers of LLCs and trusts built to obscure it. Unlike data broker records on the surface web, this information can never be removed, which pushes exposed individuals toward protection and mitigation rather than a takedown.

Cyber and Physical Risk

Pierson pointed to the convergence of cyber and physical risk facing judges, lawmakers and corporate executives. He cited the killing of UnitedHealthcare CEO Brian Thompson and the targeting of Minnesota state lawmakers at their homes. Front and back license scans, including UV and IR imagery, help criminals clear KYC and anti-money laundering checks at financial institutions. Stolen identity documents also play a role in deepfake-enabled fraud aimed at executives and their families.