153 million licenses surfaced on the dark web.

A license cannot be rotated like a password, so the exposure has no expiry.

The breach hit private scanning services that rental firms and hotels use, not a government database.

The FBI is investigating after the marketplace, called Nexus, went offline within hours.

How each outlet framed it
Ars Technica
traces breach timing—licenses appear within hours of victim use, suggesting real-time access; identifies IDScan.net as likely source via public records

Sources: Ars Technica