In September 2024, National Public Data confirmed a significant data breach that compromised the personal records of millions, exposing sensitive information such as names, email addresses, mailing addresses, phone numbers, and Social Security numbers of up to 2.9 billion individuals.
What Happened?
National Public Data, a consumer data broker specializing in criminal records and background checks for various sectors, fell victim to a cyberattack in December 2023. The hacker group known as “USDoD” claimed responsibility for the breach, which was initially reported in April when they posted the stolen data on a criminal forum. By August 6, the dataset re-emerged on multiple breach forums, made available for free download.
The exposed data included not only current and past addresses, but also names of deceased individuals. While an official report indicated that 1.3 million records might have been compromised, lawsuits suggest the number could be as high as 2.9 billion.
Why Is This Breach Dangerous?
The consolidation of this information poses significant risks; having critical details in one location makes it easier for criminals to exploit them for identity theft or fraud.
Criminals can leverage this data to apply for credit cards or loans and bypass security measures using answers to common security questions derived from the exposed information. Moreover, experts warn of an increase in phishing and smishing (SMS phishing) attacks as cybercriminals may attempt to exploit this breach further.
Could You Be Affected?
Yes! Even if you haven’t interacted with National Public Data directly, other organizations may have used their resources to gather information about you.
What Should You Do to Protect Yourself?
- Check for Exposure: Use tools like npd.pentester.com to see if your information has been compromised. If it has, take immediate action.
- Freeze Your Credit: Request a copy of your credit report and freeze your credit with Equifax, TransUnion, and Experian to prevent unauthorized accounts from being opened in your name. The process is free and takes less than 10 minutes per bureau.
- Be Vigilant Against Phishing Scams: Stay alert for potential phishing attempts via phone calls, texts, emails, or social media that may try to exploit your exposed information.
A data breach can have devastating effects on both businesses and individuals whose information is compromised. As a business owner, it’s crucial to implement robust security measures to protect your data.
If you’re concerned about potential vulnerabilities or exposure, we offer a Security Risk Assessment to evaluate your network’s security posture. Click here to schedule yours!
