A reported cache of more than 153 million U.S. and Canadian driver’s-license scans allegedly sold through a dark-web service exposes how routine identity verification turns durable government ID into a high-value, hard-to-remediate breach target.