In September 2024, National Public Data, a major consumer data broker, confirmed a massive breach that exposed personal records of millions. Among the compromised information are names, email addresses, mailing addresses, phone numbers, and Social Security numbers, potentially affecting up to 2.9 billion people. Here’s what you need to know to protect yourself.
What Happened?
National Public Data is a key player in providing background checks, criminal records, and various forms of personal data to businesses, private investigators, and government agencies. The breach began as early as December 2023, when a third-party hacker gained access to their database.
By April 2024, a cybercriminal known as "USDoD" posted the stolen data for sale on an illicit marketplace. In August, this information was made freely available across multiple breach forums, putting sensitive personal details into the hands of anyone with access to these sites.
The compromised data includes current and previous addresses, phone numbers, Social Security numbers, and, in some cases, alternate names. Although the official breach notice filed in Maine reported 1.3 million records, some lawsuits suggest the true number of exposed records could reach 2.9 billion.
As the investigation continues, many cyber experts are finding that some of the data released was inaccurate, and aside from the Social Security numbers, most of it is already public and easy to find online. The inclusion of Social Security numbers and other sensitive details are what makes this breach particularly dangerous.
Why Is This Breach Dangerous?
Even though much of the leaked information might seem easy to find online, the danger comes from its aggregation. With all of this critical data in one place, cybercriminals can more easily commit identity theft, apply for loans, or open new bank accounts in your name.
Additionally, details like childhood addresses or partial Social Security numbers are commonly used as security answers for authentication, allowing hackers to bypass security measures and access your accounts. Experts also warn that phishing and smishing (phishing via SMS) attacks may increase as criminals leverage this data to scam victims.
Could You Be Affected?
Yes—even if you’ve never interacted with National Public Data, your information may still be at risk. Companies, landlords, and other organizations often rely on data brokers like National Public Data for background checks and personal information, meaning your data could have been collected without your direct involvement.
How to Protect Yourself
Step 1: Check if Your Data Was Compromised
Visit National Public Data’s lookup tool to check if your personal information was compromised. If it was, act quickly to minimize the damage.
Step 2: Freeze Your Credit
One of the best ways to protect yourself is to freeze your credit, which prevents anyone from opening new lines of credit in your name. Request a freeze from the three major credit bureaus—Equifax, TransUnion, and Experian—and review your credit report for any unauthorized activity. The process is free and only takes about 10 minutes per bureau. If others in your household are 18 or older, it is wise to freeze their credit too.
Step 3: Be on High Alert for Phishing Scams
Cybercriminals will likely use the stolen information to launch phishing attacks via phone calls, text messages, emails, and social media. Be wary of unsolicited messages and avoid clicking on suspicious links.
Protecting Your Business
Data breaches can be devastating not only for individuals but also for businesses. As a business owner, it’s crucial to implement stringent data protection measures to safeguard your customers' and employees' information. If you’d like to assess whether your network is vulnerable to a breach or see if any of your data has been exposed, we offer a FREE Cyber Security Risk Assessment. This in-depth review of your network will help you identify risks and create a solid plan to bolster your security.
To book your assessment, call us a 281-646-1200 or click here to get started.
