cybersecurity A field note by Vikrant Sharma
The National Public Data breach leaked more than email addresses
Driver's license numbers are not passwords. They are permanent identifiers tied to voting rolls, benefits systems, and background checks. The National Public Data breach exposed 272 million of them.
The National Public Data breach is worse than the reporting suggested. Most coverage focused on names and addresses. The real problem is the driver’s license numbers. A driver’s license number is not like a credit card. You cannot cancel it. Most states issue the same number for life. That number sits in voting registration databases, child support systems, professional licensing records, and Medicaid enrolment. If someone has your license number, they can impersonate you in systems that verify identity by checking state records. The breach exposed 272 million license numbers. That is more than the adult population of the United States. The scraped data came from background check services, which pull from public and semi-public state databases. National Public Data scraped it, packaged it, and sold access. Then someone breached them. The article argues this is a national security problem because the same verification systems are used for federal clearances, benefits fraud detection, and voter registration audits. If an attacker can forge identity documents with valid license numbers, those systems fail quietly. They were built assuming license numbers were hard to obtain in bulk. I checked the South Australian driver’s license format out of curiosity. It is your last name plus a five-digit sequence number. No randomness. Victoria uses a similar pattern. If Australia had a breach like this, half the identity verification workflows in government would need redesigning. The breach happened in April 2024. We are now in September 2026. States have not reissued numbers. The article quotes security researchers saying that would cost billions and require legislative changes in 50 states. So the numbers stay compromised. This is the kind of breach that makes you rethink baseline assumptions. Driver’s license numbers were supposed to be semi-secret identifiers. Now they are public. Every system that treats them as proof of identity is quietly broken.
Source: America’s Driver’s License Breach Is a National Security Disaster
