Privacy Nightmare: National Public Data Hacked

 

Editor: Ava Gozo. August 15, 2024.

A massive data breach allegedly occurred at National Public Data, a company that provides background checks and public records data. Here are the key details:

The Breach

National Public Data reportedly suffered a data breach that exposed the personal information of approximately 2.9 billion people[1][2]. The breach is believed to have occurred in late December 2023, with potential data leaks in April 2024 and summer 2024[2].

Stolen Information

The compromised data allegedly includes:

• Full names
• Email addresses
• Phone numbers
• Social Security numbers
• Mailing addresses[2]

Hacking Group Involvement

A hacking group known as USDoD claimed responsibility for the breach. They allegedly offered the stolen database, which is about 4 terabytes in size, for sale on the dark web for $3.5 million[3][4].

Timeline & Discovery

• April 2024: The hackers reportedly posted the database on a dark web forum for sale[4].
• July 2024: Some individuals learned their data was compromised through identity theft protection services[3].
• August 2024: The breach gained widespread media attention, and a class-action lawsuit was filed in Florida[3][4].

National Public Data's Response

National Public Data acknowledged the incident on its website, stating they are cooperating with law enforcement and governmental investigators. They have implemented additional security measures to prevent future breaches[2].

Uncertainty Surrounding the Breach

As of mid-August 2024, there was still some uncertainty about the full extent and details of the breach. Some experts expressed caution about the reported scale of the incident, citing technical difficulties in exfiltrating such a massive amount of data undetected[4].

Recommended Actions

If you believe your data may have been compromised:

1. Monitor your financial accounts closely.
2. Contact the three major U.S. credit reporting agencies for free credit reports.
3. Consider freezing your credit.
4. Stay vigilant for potential phishing attempts.
5. Change passwords for sensitive accounts.
6. Consider signing up for identity theft protection services[2][3].

As the situation continues to develop, it's advisable to stay informed about any updates or official communications from National Public Data regarding the breach.

References

USA Today. (2024, August 15). 2.9 billion records stolen in Social Security data hack, USDoD claims. https://www.usatoday.com/story/tech/2024/08/15/social-security-hack-national-public-data-breach/74807903007/ Pocono Record. (2024, August 14). What to do if your data was leaked in the 

National Public Data leak. https://www.poconorecord.com/story/news/2024/08/14/what-to-do-if-your-data-was-leaked-in-the-national-public-data-leak/74796229007/  

News4Jax. (2024, August 15). Billions of people possibly compromised after National Public Data breach. https://www.news4jax.com/news/local/2024/08/15/billions-of-people-possibly-compromised-after-national-public-data-breach/  

SecurityWeek. (n.d.). Unconfirmed hack of 2.9 billion records at National Public Data sparks media frenzy amid lawsuits. https://www.securityweek.com/unconfirmed-hack-of-2-9-billion-records-at-national-public-data-sparks-media-frenzy-amid-lawsuits/  

YouTube. (n.d.). [Video]. https://www.youtube.com/watch?v=C6-qEt3KOFs 

Citations 

[1] https://www.usatoday.com/story/tech/2024/08/15/social-security-hack-national-public-data-breach/74807903007/
[2] https://www.poconorecord.com/story/news/2024/08/14/what-to-do-if-your-data-was-leaked-in-the-national-public-data-leak/74796229007/
[3] https://www.news4jax.com/news/local/2024/08/15/billions-of-people-possibly-compromised-after-national-public-data-breach/
[4] https://www.securityweek.com/unconfirmed-hack-of-2-9-billion-records-at-national-public-data-sparks-media-frenzy-amid-lawsuits/
[5] https://www.youtube.com/watch?v=C6-qEt3KOFs