IDScan.net数据泄露致1.5亿身份凭证遭窃
150 million IDs allegedly stolen — including Pete Hegseth’s
US Secretary of War Pete Hegseth’s Driver’s License is allegedly among more than 150 million that have been offered for sale on the dark web after identity verification firm IDScan.net suffered an apparent data breach.
据称，美国战争部长皮特·赫格塞斯的驾照在身份验证公司 IDScan.net 遭遇明显数据泄露后，成为暗网上超过 1.5 亿份待售数据之一。
Hegseth’s ID can be accessed for just $100. According to KrebsOnSecurity, the FBI is investigating the breach.
只需 100 美元即可获取赫格塞斯的身份证件。据 KrebsOnSecurity 报道，联邦调查局（FBI）正在对此起数据泄露事件展开调查。
The leaked IDs were being offered via the Russian identity theft service “Nexus,” which claims to possess records including travel documents, medical cards, and various other forms of ID.
这些泄露的身份证件正通过俄罗斯身份盗窃服务“Nexus”提供，该服务声称拥有包括旅行证件、医疗卡和各种其他形式身份证件在内的记录。
A screenshot of Hegseth’s driver’s license shared by KrebsonSecurity.
KrebsonSecurity 分享的赫格塞斯驾照截图。
Read more: Moonwell’s latest $9M attack marks four incidents in a year
阅读更多：Moonwell 最新 900 万美元攻击事件标志着一年内发生四起事故
Nexus says it’s been “continuously exfiltrating new data for over a year into our private database.”
Nexus 表示，它已“在过去一年中持续将新数据提取到我们的私有数据库中。”
The database has been updated with hundreds of thousands of fresh details during the past few days. However, KrebsonSecurity notes that Nexus is no longer available.
过去几天，该数据库已更新数十万条新鲜细节。然而，KrebsonSecurity 指出 Nexus 目前已不可用。
Data stored in multiple Fortune 500 companies at risk
多家财富 500 强公司存储的数据面临风险
Cybersecurity analyst “vx-underground” has shared a list of IDScan clients that may have leaked data.
网络安全分析师“vx-underground”分享了一份可能已泄露数据的 IDScan 客户名单。
These include Shell, AMC Theaters, DraftKings, Dutchie, FedEx, Hertz, Chevrolet (General Motors), GameStop, Jack Henry, MRI (Checkpoint ID), Polaris, Simmons Bank, LendingUSA, Circa Resort & Casino, Planet 13, Rouses Market, US Coast Guard Academy, Caesars Entertainment, and Motorola.
其中包括壳牌（Shell）、AMC 影院、DraftKings、Dutchie、FedEx、赫兹（Hertz）、雪佛兰（通用汽车）、GameStop、Jack Henry、MRI（Checkpoint ID）、北极星（Polaris）、西蒙斯银行（Simmons Bank）、LendingUSA、Circa 度假村与赌场、Planet 13、Rouses Market、美国海岸警卫队学院、凯撒娱乐（Caesars Entertainment）以及摩托罗拉（Motorola）。
Indeed, Nexus reportedly claims the breach involves “a major identity verification company” with multiple Fortune 500 company customers.
事实上，据报道 Nexus 声称此次泄露涉及一家拥有多家财富 500 强公司客户的“主要身份验证公司”。
ID leaked after cannabis dispensary scan
大麻药房扫描后身份证泄露
Privacy researcher Zach Edwards confirmed that his ID was leaked after he visited the “largest cannabis dispensary in the world,” Planet13, in Las Vegas.
隐私研究人员扎克·爱德华兹（Zach Edwards）证实，他在拉斯维加斯访问了“世界上最大的大麻药房”Planet13 后，其身份证信息遭到泄露。
GTA VI leaker’s token crashes despite ‘first true spoiler’
尽管有‘首个真正剧透’，GTA VI 泄露者的代币价格暴跌
Read more: Moonwell’s latest $9M attack marks four incidents in a year
阅读更多：Moonwell 最新 900 万美元攻击事件标志着一年内发生四起事故
Edwards said that all the signs are pointing to “IDscan having a hellacious ongoing real-time breach of their data.”
爱德华兹表示，所有迹象都指向“IDscan 正在对其数据进行猛烈且实时的持续泄露。”
Weeks of leaks and hacks
数周的泄露与黑客攻击
This week, thousands of X users also got a security scare when their accounts were inundated with suspicious password change emails.
本周，数千名 X 用户也经历了安全恐慌，他们的账户被大量可疑的密码更改邮件淹没。
Cloud storage firm Dropbox was also hacked last month, allowing attackers to view the data of 5,000 compromised accounts.
云存储公司 Dropbox 上月也遭黑客入侵，导致攻击者能够查看 5,000 个受损账户的数据。
Unreleased footage from the upcoming GTA VI game was also leaked by pseudonymous X user “Cyberleek,” who used the stolen footage to pump their cryptocurrency.
尚未发布的即将推出的 GTA VI 游戏片段也被化名 X 用户“Cyberleek”泄露，他利用这些被盗片段来拉升自己的加密货币价格。
Got a tip? Send us an email securely via Protos Leaks. For more informed news and investigations, follow us on X, Bluesky, and Google News, or subscribe to our YouTube channel.
有线索？请通过 Protos Leaks 安全地给我们发送电子邮件。如需更多深入的新闻报道和调查，请关注我们在 X、Bluesky 和 Google News 上的账号，或订阅我们的 YouTube 频道。
The post 150 million IDs allegedly stolen — including Pete Hegseth’s appeared first on Protos.
原文链接：据称包括皮特·海格塞斯在内的 1.5 亿条身份信息遭窃——该文章首发于 Protos。
更进一步：量化金融体系
看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力