Security expert Joshua McKenty, CEO and Co-Founder of Polyguard, has issued a strong warning about the national REAL ID system, calling it a “giant bullseye for every hacker in the world” and a potential “surveillance superweapon.” His concerns, articulated in an interview with Cybernews, follow the full implementation of REAL ID requirements for domestic air travel and federal facility access, which went into effect on May 7, 2025.
Linked DMV Systems and Biometric Risk
McKenty, whose company specializes in defending against AI-driven identity fraud and deepfakes, highlighted the program’s core architecture as a serious vulnerability. While the REAL ID system does not rely on a single centralized federal database, it effectively creates a distributed national system by linking all 50 state DMV databases. These systems share both biographic and facial biometric data, making the network accessible across jurisdictions.
“The REAL ID rollout means that the 50 state-level databases that connect biographic information with biometric data have now been linked into one national super-database,” McKenty said in a recent interview. He emphasized that this structure creates not only a high-value target for cyberattacks but also a potential surveillance framework that has yet to be formally activated.
The Department of Homeland Security and TSA have publicly defended the system’s security measures, asserting that biometric use—particularly facial recognition scans at airport checkpoints—is optional and privacy-protected. However, cybersecurity experts argue that the mere existence of such an interconnected system raises fundamental concerns about access control, misuse, and long-term data governance.
Privacy Concerns and Government Surveillance Fears
McKenty’s remarks echo broader privacy community concerns that REAL ID’s infrastructure could be leveraged for purposes beyond identity verification. Civil liberties groups have cautioned that a nationally linked identity system—especially one containing biometric data—could eventually support expanded surveillance or immigration enforcement. These concerns are compounded by the lack of a comprehensive federal framework governing biometric data collection and use.
REAL ID implementation has faced persistent resistance at the state level, with some lawmakers pushing to preserve opt-out rights for residents. Despite these efforts, the program has moved forward, and all travelers aged 18 and older must now present a REAL ID-compliant credential for domestic flights and access to federal buildings.
Meanwhile, DHS continues to invest in biometric innovation through initiatives such as its Biometric Technology Rally, which evaluates vendor solutions for real-world use. While these efforts aim to modernize identity verification, they also raise questions about how far-reaching government use of biometric systems may become.
As federal agencies expand biometric infrastructure, experts like McKenty are calling for more transparency and safeguards around how identity data is collected, stored, and shared. Without stronger regulation, critics argue, the REAL ID system could serve as a foundational layer for more intrusive forms of digital surveillance.
Sources: Cybernews, SCWorld, Security Magazine
—
May 8, 2025 – by Cass Kennedy
