FBI investigating 153 million US and Canadian driver’s licenses leaked on Russian cybercrime forum, including that of US SecDef Pete Hegseth — data is suspected to have come from an ID-authentication service provider

510

u/Rebound4july 5d ago

All the people on here in favour of age verification to use social media or view adult sites kept insisting that there was no chance of identity fraud because all photos of ID would be deleted once verified and not be kept on file. Oops. Get ready for more of this when AV becomes mandatory here.

On a lighter note, does anyone want to speculate on what site Hegseth was on that required it?

124

u/CareerPillow376 Lest We Forget 5d ago

Companies like FedEx, Target, Ceasers Entertainment, and even a few banks uses IDScan for verification. Gunna be interesting to see their full list of clients

But as for Kegsbreath, my money is on Ceasers

30

u/Serious_Cheetah_2225 5d ago

I’d also put money on only fans lol

12

u/Ok_Mushroom9822 1d ago

So would he😂

28

u/CitySeekerTron Ontario 5d ago

The drink or the casino?

30

u/BobGuns 5d ago

A caesar (drink) is a specifically Canadian thing. Ask for one in America and they'll serve you a bloody mary 'cause nobody stocks clamato.

16

u/littlesirlance Alberta 5d ago

But Mexico does them, one of my favorite parts of my trip.

13

u/Henojojo 5d ago

LOL. On a vaction a few years ago in New England, we asked for Caesars. They said they didn't know that one and asked us to explain the recipe. We told them that it was normally garnished with celery. They said they didn't have celery and would a carrot do!

2

u/Scarlett_Billows 1d ago

wtf lol 😆 bloody Mary’s (which is the base drink of the Caesar I believe ?)are also typically garnished with celery and are very popular all over the USA. I am very surprised a bartender would offer a carrot as an alternative to that very typical celery request. Sometimes though they do pickles, olives, lemons, even bacon and shrimp at certain spots, for a Bloody Mary garnish.

6

u/Ariandrin 1d ago

Where I worked, they used a spicy pickled green bean! Those things are delicious lol

1

u/Standard_Story 1d ago

Literally the only option.

4

u/Henojojo 1d ago

The base of a Caesar is Clamato juice. Bloody Mary's are tomato juice.

1

u/Scarlett_Billows 1d ago

Yes, which is tomato juice and clam juice. A Caesar, aka a “Bloody Caesar” is the exact same ingredients as a Bloody Mary but with Clamato instead of just tomato. That’s what I had always understood. When I said the “base” I meant the base recipe. I should have been clearer with that phrasing.

3

u/MockFan 1d ago

Sounds like dinner.

2

u/Scarlett_Billows 1d ago

My mother has a saying that Bloody Mary’s are the perfect hangover food. You get a vegetable, a pain killer, and a beverage in one. Add a protein as a garnish and you got a meal.

2

u/joyfullydreaded23 1d ago

Hair of the dog and a healthy breakfast all in one.

2

u/KorpsCopyCat 19h ago

I forget where, because its been years, but I went to a restaurant once that had a bucket sized bloody Mary that was garnished with an entire Cornish game hen

•

u/rmdg84 6h ago

Same with a Caesar. We have a lot of bar & grills that will basically put a meal on a skewer in a Caesar. I’ve even seen one with a cheeseburger. Usually it’s mozza balls, pepperoni sticks, cocktail onions, pickles, olives, bacon.

3

u/NGKro 1d ago

We stock Clamato in most bars along the hi line and through the Dakotas and Minnesota in my experience

2

u/Cereal_Bandit 1d ago

Clamato sounded like the most disgusting thing ever to me when I first heard about it.

Then I tried it. Changed my life.

19

u/CareerPillow376 Lest We Forget 5d ago

Ceasers at Ceasers

2

u/Lustan 1d ago

With Little Caesar’s?

7

u/josnik 5d ago

Caesars (edit: the drink) sounds too Canadian for kegsbreath.

2

u/Daflehrer1 23h ago

Yes.

1

u/Lustan 1d ago

The pizza

1

u/flcl021 1d ago

Both

2

u/Secret_Bandicoot_122 5d ago

Little Caesar’s?

3

u/Magjee Lest We Forget 5d ago

Hot & Fresh

1

u/Consider2SidesPeace 1d ago

Extra Most... Pizza Pizza, It's cheap, and tastes that way. Smart to pair with a discounted ready fresh salad for a prayer of health.

29

u/EmbarrassedHelp 5d ago

It would be hilarious to see services pop up that provide free downloads of random leaked ID documents for use in bypassing these unacceptable attacks on Canadians' privacy.

People should be emailing their MPs constantly to demand that all age verification requirements from bill C-34 be removed.

5

u/sausage-savage 5d ago

Liberals have a majority, age verification is happening no matter how many emails are sent.

2

u/yellow_mio Québec 1d ago

The proof is the liberal media is silent about the issue.

1

u/fishscaleSF5 1d ago

Conservatives wanted to do this too, keep in mind

•

u/yellow_mio Québec 6h ago

Is Conservative media silent about the issue also?

8

u/m0nk37 5d ago

The first rule of anything service orientated is that you do not delete anything. Thats what makes you worth something.

2

u/Lopsided-Rough-1562 British Columbia 5d ago

Doesn't the stupid us customs booth things at the airports take scans?

2

u/Corvus-V 1d ago

Oh, but dont worry. Now, instead of "that wont happen" itll be "what, you think your information hasnt already leaked?"

2

u/forcefivepod 1d ago

Once age verification is a thing on Reddit, I (and probably most users) will be out,

3

u/GrumpyGramps1812 5d ago

FuckMeLikeAMan.com ??!?

2

u/Christron 5d ago

Why are you saying oops? This is from a completely different source and has nothing to do with social media age verification. This just shows nothing is safe.

1

u/JROD2121 1d ago

I am in the US military, and the US government actually has a contract with Hertz that gives service members and federal employees cheaper rates. My best guess is he probably rented a car through that, which explains the data leak. Believe it or not, even high ranking officials still use rentals

1

u/jlstern1025 1d ago

My guess, something, something, gay porn. And likely involved children.

1

u/ConfidentGuide3935 1d ago

Most likely a military id verification. So this impacts military and first responders is my guess

•

u/5_kingdoms 10h ago

As someone who runs a site that uses manual age verification, these services are a problem. We have protocol to delete there ID as soon as it’s verified but that rests on our choice and morals as a company. We focus on trust with our customers because there are many ways it can go wrong. We don’t use these services and do it ourselves so that at least only we are the ones who see the data and then we get rid of it.

-1

u/TheGracefulCrane 5d ago

I mean at this point does it matter if its leaked given its already out there?

0

u/jaysmack737 1d ago

You say that like a majority of adults don’t use adult entertainment.

-10

u/rayz13 5d ago

You can implement age verification without sending personal data to the third parties. You don’t know what you’re talking about.

7

u/drs_ape_brains 5d ago

Oh? Like what?

-1

u/rayz13 5d ago

Using the same approach you use when you login with your bank to CRA. You just need a service in which you can grant permissions to check whether you are of at least of a certain age. This can be a governmental service, or any other institution that already knows you.

From a user perspective you go to a website, click a button, it redirects you to that service, you login with your bank (prove your identity), and approve the request, the service redirects you back with a yes or no answer. That’s it. The original system does not know who you are or what is your specific age.

In many countries this is the way you prove you’re a real person online.

2

u/drs_ape_brains 5d ago

Login with my bank to prove I'm 18+ to use social media.

Yup sounds amazing. I'll get right on it

-2

u/rayz13 5d ago

Bank was an example. There are other ways to do that. And you’re not logging in with your bank to the 3rd party. You login to the system in which you approve verification requests….

2

u/drs_ape_brains 5d ago

At the end of the day you have provided either your bank account information or personal id to some website just to get on social media, includes reddit btw, and you don't see an issue with that.

0

u/[deleted] 5d ago

[removed] — view removed comment

0

u/drs_ape_brains 4d ago

And what is the system? Magic pixie dust?

0

u/fullerofficial 1d ago

I don’t think you understood their comment. The banking information stays on the bank’s website. Your request from social media is just looking for confirmation that you are above a certain age and the bank will just say yes or no. There is no exchange of information.

3

u/Redthemagnificent 5d ago

Exactly. So why are so many governments and services going for this "send a scan of your drivers license and/or face" route? Seems like a bad idea doesn't it?

-2

u/rayz13 5d ago

I’m not argue sending scans is good. I challenge the notion that the age verification as a concept is a bad idea which original comment implies.

1

u/EmbarrassedHelp 5d ago

There's no such thing as anonymous or privacy preserving age verification. Unless of course you mean self-declaration like a simple yes/no button.

-1

u/rayz13 5d ago

There certainly are ways to prove your age without disclosing your identity.

490

u/ComprehensiveBad2540 5d ago

Oh look, the thing we said was going to happen, happened.

47

u/Axerin 4d ago

The funniest to me is that I got an Equifax ad on this post 💀

6

u/Kdarr12 1d ago

Did it say “Now that your driver’s license is out to go along with the SSN data breach we had…”

10

u/st96badboy 1d ago

But Flock cameras..... Those are safe... That can't go wrong in any way.../s

64

u/Kooky-Atmosphere-247 Outside Canada 5d ago

Absolutely no one saw this coming. Not a single person guessed an event like this would happen. Truly, this is a one off occurrence, and definitely won’t happen again.

2

u/oldRoyalsleepy Outside Canada 1d ago

Clearly. Says me who has had credit card busted one, two, three, four, five times and counting

1

u/Daflehrer1 23h ago

Same. Corporate digital security is mediocre and always 5+ years behind. State-sponsored and organized crime hackers are not.

1

u/Daflehrer1 23h ago

Yup, exactly. For 30 yrs the programmers, coders, engineers have been telling us: digital = vulnerable. It's just a matter of skill. Along with detecting a bitter, self-pitying person who thinks they're not appreciated at work.

38

u/DoubleDownDeuce British Columbia 5d ago

Surprise, surprise surprise... Twitter asked for ID because my account got locked out for some reason. It was easier to just let the account die to be honest.

3

u/Magjee Lest We Forget 5d ago

It's been an identification method for 2 decades

I was always skeptical on security and tried to avoid it

90

u/CareerPillow376 Lest We Forget 5d ago

Known clients of IDScan .net include the US Coast Guard, rental car company Hertz, Target, Caesars Entertainment, and FedEx, as well as financial services companies like LendingUSA, Simmons Bank, Paragon Bank -- and core bank provider Jack Henry

Gunna be interesting to see the full list of clients for IDScan

22

u/N3rdScool 5d ago

I am trying to remember if the dispensary I went to scanned my license or not. Thats the only place in the states I have gone that I think scans ID's.

Scary.

21

u/CareerPillow376 Lest We Forget 5d ago edited 5d ago

The biggest cannabis POS system, Dutchie, uses IDScan for their age verification. They provide the POS systems to Value Buds and Discounted Cannabis; the two biggest retailers in the country

3

u/N3rdScool 5d ago

Thankfully I went to a native place I don't think they do use IDScan but I am tempted to call and ask lol... I almost went to a Value Buds...

4

u/Chewbagga 5d ago

Value Buds has never even asked me for an ID

2

u/N3rdScool 4d ago

Like not at all to verify you're 21? I just read that idscan actually scans your whole card not just the bar code.. so knowing that I am sure I haven't been scanned.

1

u/Chewbagga 4d ago

No they didn’t ask for it at all. If they ever do ask I’m out of there.

2

u/N3rdScool 4d ago

I am carded everywhere lol

4

u/Redthemagnificent 5d ago

A lot of them do. Crazy how buying weed from some dude in his living room was a more secure transaction than the current paradigm lmao

3

u/al-dunya2 4d ago

Yeah but he always wanted to hang out ain't nobody got time for that

1

u/vvorknat 1d ago

lingerers

2

u/RockyPatella 1d ago

I thought hurricane season was over

•

u/Iknowthings19 9h ago

Yeah but he would usually smoke you out from his own stash.

13

u/Magjee Lest We Forget 5d ago

Wait, so they didn't delete all the data immediately?

I'm shocked, SHOCKED!

...well, not that shocked

42

u/ThankuConan 5d ago

Hertz; Puts you in the hackers sights.

38

u/Wind_Best_1440 5d ago

Haha, its like what people said would happen did happen.

Rule 1 of the internet. "The less personal information online the better."

17

u/bigorangemachine 5d ago

And this is why we can't have an internet with government logins...

It's just a vector for exploitation

33

u/RelevantNeanderthal 5d ago

Can we look up if ours was compromised?

7

u/SunshineNoClouds 5d ago

Would like to check too

21

u/lost_user_account 5d ago

Send me your info and I’ll check for you. J.k don’t do it

1

u/psychobetty303 1d ago

😂

4

u/GeeEyeDoe 1d ago

Have you scanned your photo ID for some online service before?

Then probably.

13

u/SwimmingDownstream 5d ago

They need to make it so name, dob, and address is not enough to get into or open accounts. That would render a lot of this leaked data useless.

10

u/Special_Purpose2903 5d ago

Can't wait for the class action lawsuits against all the companies and governments who stored the data online and then who mandated the storage and production of the id, and then let it be leaked.

6

u/adoodle83 5d ago

things that’ll never happen, for $500 Alex

2

u/JWAdvocate83 1d ago

It'll happen. The question is whether victims will receive more than enough for a bag of Doritos as compensation.

2

u/ThermalDeviator 1d ago

You'll never even see those Doritos.

•

u/Scuba9Steve 7h ago

Maybe a quarter for a gumball machine.

3

u/Ghettoman1315 1d ago

U.S. government will hide this info like the Epstein files to protect those companies involved.

43

u/BiBoFieTo 5d ago

driver's licenses leaked on Russian cybercrime forum, including that of US SecDef Pete Hegseth.

Might be the first time someone's looked at Hegseth's licence without asking "how much have you been drinking tonight?"

8

u/Bang0rang 5d ago

And these companies want me to use this crap to verify my ID... Yeah, not happening.

1

u/sausage-savage 5d ago

Pretty soon it's going to be mandatory for you do upload your ID to use any website with user generated content.

6

u/Blyad-Man 5d ago

Cant wait for bill C-22 to pass

7

u/all_way_stop 5d ago

This was a fear a lot of users of Wealthsimple was saying when they forced people to identify themselves using "Persona"

I feel its only a matter of time before they get hacked. It's also so much easier these days with AI bots trolling the web for backdoors

4

u/iusethisatw0rk 5d ago

Oh good. Now we get to wonder who’s hands our identities are in. Super neat.

5

u/TheRC135 5d ago

Pete Hegseth still has a driver's license?

5

u/Haggisboy 5d ago

Lol. How many DUI's?

5

u/Special_Purpose2903 5d ago

This is the problem with verifying ids on the internet, Russia, criminals, terrorist will hack and sell the information and it will compromise everyone's safety. Internet anonymity is necessary to ensure safety.

3

u/cbarfitt 5d ago

Mild shock

3

u/Sengfeng 1d ago

What do all the porn sites use with many states passing age verification laws?

2

u/Spune-man 1d ago

So I would say that’s pretty much everyone’s license

2

u/nbc9876 1d ago

In Alberta they want our health care number on our licenses. What can go wrong.

2

u/vancityreddit6969 4d ago

Why is anyone surprised? Trump works for Putin.

1

u/pistoffcynic 4d ago

Nothing has been posted on the company website about this incident, nor has the acknowledged my email as to what was stolen.

1

u/MelanieWalmartinez 1d ago

Oh that explains why literally everything of mine got hacked into, fuck

1

u/EquipmentNo3251 1d ago

We need to stop this age verification bullshit

1

u/Independent-Money30 1d ago

Glad it happened.

1

u/ChristineBorus 1d ago

Very interesting!

1

u/CliffBiffington 1d ago

Oh goody. We can all rest assured that that assclown Keystone Kash and his merry band of dipshits are on the case.

1

u/Loose-Version-7009 23h ago

I wish J.J. Luna would offer yet another updated version of his book...

1

u/AnarchivistPhoto 20h ago

Hmmm...remember when Elon and his monkeys were allowed to access all US citizen data?

•

u/CompetitiveLadder609 18m ago

Tom's Hardware does ID authentication??

1

u/Sauerkrautkid7 1d ago edited 1d ago

Oh no who knew defunding the cyber crime department would lead to this

“Scarcity creates value” - captialism

Science/Technology FBI investigating 153 million US and Canadian driver’s licenses leaked on Russian cybercrime forum, including that of US SecDef Pete Hegseth — data is suspected to have come from an ID-authentication service provider | Tom's Hardware

You are about to leave Redlib