Source: Vector choice - URS Preferred Partner
In September 2024, National Public Data confirmed a significant data breach that compromised the personal records of millions of individuals. The exposed information includes names, email addresses, mailing addresses, phone numbers, and Social Security numbers of up to 2.9 billion people. Here’s a detailed overview of the incident and steps you can take to protect yourself.
Incident Overview
National Public Data, a consumer data broker providing criminal records, background checks, and other data services to various entities, was hacked. The breach is believed to have started in December 2023 when a third-party bad actor attempted to gain access.
In April, a cybercriminal known as “USDoD” posted the stolen data online in a criminal community. By August 6, the dataset was freely available on several breach forums.
The compromised data includes sensitive, personally identifiable information such as names, addresses, phone numbers, email addresses, and Social Security numbers. Some records also contain previous addresses and alternate names. While the official breach notice filed in Maine indicated 1.3 million records were affected, lawsuits suggest the number could be as high as 2.9 billion.
Why This Breach is Concerning
Even though much of the exposed information can be found online, having it all in one place makes it easier for criminals to misuse it. This data can be used to apply for credit cards, loans, or open new bank accounts. Additionally, details like childhood street names or the last four digits of Social Security numbers are often used in security questions, making it easier for hackers to bypass authentication.
Experts also warn of an increase in phishing and smishing (phishing via SMS) attacks as a result of this breach.
Potential Impact
You could be affected even if you’ve never interacted with National Public Data. Other organizations, businesses, landlords, and more may have used their services to gather information about you.
Steps to Protect Yourself
Check for Exposure: Use tools like NPD Pentester to see if your data has been compromised. If it has, take immediate action.
Freeze Your Credit: Request a copy of your credit report and then freeze your credit. This prevents criminals from opening new lines of credit in your name. Contact Equifax, TransUnion, and Experian to request a freeze. The process is free and quick. Ensure that others in your household over 18 also freeze their credit.
Monitor for Phishing Scams: Be vigilant about phishing attempts through phone calls, text messages, emails, and social media. Cybercriminals may use the stolen information to scam you.
Business Owner Responsibilities
A data breach is devastating for both the affected individuals and the business involved. As a business owner, it’s crucial to take the highest precautions to protect your data. Consider conducting a full security risk assessment to identify vulnerabilities and ensure your network is secure.
By following these steps, you can better protect yourself and your business from the fallout of this significant data breach.
To learn more Contact us