In September 2024, National Public Data confirmed a massive data breach that compromised the personal information of millions. The exposed data includes names, email addresses, mailing addresses, phone numbers, and Social Security numbers of up to 2.9 billion people. Here’s what you need to know about this breach and how to protect yourself.

What Happened?

National Public Data, a consumer data broker that provides criminal records, background checks, and other information to private investigators, consumer public record sites, HR departments, staffing agencies, and the government, was hacked. The breach is believed to have started in December 2023 when a third-party hacker tried to infiltrate the system.

In April 2024, a cybercriminal known as “USDoD” posted the stolen data on an underground criminal forum. By August 6, this data resurfaced and was posted for free on several breach forums, making it available for anyone to download.

The breach included sensitive information like names, addresses, phone numbers, email addresses, and Social Security numbers, some belonging to deceased individuals. In many cases, it also included past addresses and alternate names.

While the official data breach notice filed in Maine estimated that 1.3 million records were compromised, lawsuits suggest the breach may have exposed as many as 2.9 billion records.

Though experts are finding some inaccuracies in the leaked data, and much of it is already publicly available, there are still significant risks associated with this breach—especially considering the exposure of Social Security numbers.

Why Is This Breach Dangerous?

Even though much of the compromised data may be publicly accessible, having all of this information in one place makes it easier for cybercriminals to commit identity theft. Here are some specific risks:

Identity Theft: Criminals can use this information to apply for credit cards, loans, or open new bank accounts in your name.

Bypassing Security Questions: Information like childhood street names or the last four digits of your Social Security number, often used in security questions, can help hackers bypass authentication to access your accounts.

Increase in Phishing and Smishing Attacks: Experts predict a surge in phishing emails and SMS phishing (smishing) attempts as criminals exploit this data to trick victims.

Could You Be Affected?

Yes. Even if you’ve never heard of National Public Data or used their services, organizations like landlords, employers, and other businesses may have utilized their resources to access information about you.

How to Protect Yourself

If your information has been compromised in the breach, take these steps immediately to protect yourself:

1. Check If Your Data Was Exposed

Use tools like this one to see if your information was part of the breach. If it was, act quickly.

2. Freeze Your Credit

One of the best ways to protect your identity is to freeze your credit and set up alerts. This prevents criminals from opening new lines of credit in your name. Contact the three major credit bureaus—Equifax, TransUnion, and Experian—to request a freeze. The process is free and takes just a few minutes for each bureau.

It’s also a good idea to freeze the credit of other household members over 18 years old. Anyone with a Social Security number is vulnerable to identity theft after a breach of this size.

Once your credit is frozen, review your credit report for any unauthorized activity and set up alerts for future monitoring.

3. Stay Alert for Phishing Scams

Cybercriminals will likely use this leaked information to target victims through phishing emails, phone calls, text messages, and even social media scams. Be vigilant, and never click on suspicious links or share sensitive information with unknown sources.

Protect Your Business

A data breach is devastating for both the businesses that get hacked and the individuals whose data is exposed. As a business owner, it’s critical to take the necessary precautions to safeguard your organization’s sensitive data.

If you’re concerned about whether your business or personal information has been leaked or if your network is vulnerable to future breaches, we can help. Schedule a FREE Security Risk Assessment with our team. We’ll conduct a comprehensive review of your network and provide a blueprint for strengthening your security.

To book your assessment, call us at 214-550-0550 or click here.

Stay vigilant, protect your data, and take steps today to safeguard your identity.

Software updates can seem like a hassle, but ignoring them can make your systems vulnerable to cyberattacks. Hackers are constantly searching for weak points, and outdated software is often an easy target.

So, how do you know when it’s time to update? And should you always rely on your computer to tell you? Here are five clear signs that it’s time for an update, along with tips on how to update safely.

1. Your Software Is No Longer Supported

If your software provider has stopped releasing updates for your current version, it’s a major warning sign. Unsupported software is often riddled with vulnerabilities that cybercriminals can exploit. Keep an eye out for announcements about end-of-life support for your software, and upgrade before you’re left exposed.

Tip: Don’t wait until the software stops working. Proactively plan for updates and migrate to newer versions while full support is still available.

2. You Notice Slower Performance

If your software suddenly becomes sluggish, it could be outdated. Newer versions are typically optimized for better performance, while skipping updates can leave you with buggy, slow software.

Tip: If performance dips, check for pending updates in the software settings or download the latest version directly from the provider’s website.

3. You Receive Security Alerts

Has your antivirus or security software flagged vulnerabilities in an application you use? This is a strong sign that an update is overdue. Outdated software leaves the door open to security threats, so take these alerts seriously.

Tip: Use a trusted antivirus program that can detect vulnerabilities and notify you when updates are needed. Always verify update alerts before acting on them to avoid falling for phishing scams.

4. It’s Been More Than 6 Months Since Your Last Update

If you haven’t updated your software in over six months, chances are you’re due for one. Many providers release updates regularly to fix security flaws and improve functionality.

Tip: Instead of waiting for update notifications, set a reminder to check for updates on a regular basis—especially for critical software like operating systems and antivirus programs.

5. New Features Have Been Announced

Sometimes software updates come with exciting new features. If you’re hearing about tools or functionalities you don’t have, it’s a sign you’re behind on updates.

Tip: Follow your software providers’ blogs or sign up for notifications to stay informed about the latest improvements and features.

How to Update Safely

Updating software is essential, but it’s important to do it safely. Here’s how to ensure a smooth and secure update process:

Verify the Source: Only download updates from the official provider’s website or a trusted app store. Avoid third-party websites or suspicious links.

Back Up Your Data: Before any major update, back up your important files. If something goes wrong during the update, you’ll have a safety net.

Restart Your Device: Once the update is complete, restart your computer to ensure all patches and new features are fully installed.

By staying on top of your software updates, you not only improve performance but also protect your systems from cyber threats. Don’t wait until vulnerabilities are exposed—keep your software current to ensure a secure network.

Need help managing your software updates? Call us at 214-550-0550 or click here to schedule a consultation. Stay safe and stay updated!

Phishing attacks are the most common type of cybercrime for one simple reason—they work. Every day, over 3.4 billion spam emails flood inboxes around the world, with phishing attempts leading the charge. These attacks have been the most frequent form of cyber attack for years because they’re easy to execute, easy to scale, and still fool countless people. Now, with AI tools like ChatGPT, it’s even easier for cybercriminals to craft emails that look and sound more convincing, making it harder to spot a phishing attempt.

Phishing scams can have devastating effects on your business if you’re not careful. That’s why, in honor of Cybersecurity Awareness Month, we’ve created this guide to help you and your team identify phishing emails and understand the critical importance of stopping them.

The Dangers of Phishing Attacks

Phishing emails aren’t just an annoyance—they pose a real and significant threat. Here are four major risks of falling victim to these attacks:

Data Breaches
Phishing attacks can expose your company’s sensitive information to hackers. Once accessed, this data can be sold on the dark web or held for ransom. Even if you pay, there’s no guarantee the criminals will return it. This can lead to legal issues, financial loss, reputational damage, and a loss of trust from your customers.

Financial Loss
Cybercriminals often use phishing emails to steal money directly, whether by tricking businesses into paying fraudulent invoices or authorizing fake transactions. The financial impact can be severe and long-lasting.

Malware Infections
Phishing emails frequently contain malicious links or attachments. Clicking these can lead to malware infections, which can disrupt your operations, result in data loss, and require costly cleanup.

Compromised Accounts
If an employee falls for a phishing scam, their account could be compromised. This gives hackers a foothold inside your business, allowing them to launch further attacks or access confidential company data.

These dangers are just the tip of the iceberg. Fortunately, there are effective steps you can take to defend against phishing attacks.

Introducing the S.E.C.U.R.E. Method to Identify Phishing Emails

To help you and your employees spot phishing emails before they cause harm, follow the S.E.C.U.R.E. Method:

S – Start With the Subject Line
Is it strange or off? Look for odd patterns like “FWD: FWD: FWD: review immediately” or anything that seems unusual.

E – Examine the Email Address
Do you know the sender? Is the email address misspelled or unfamiliar? Be cautious if the sender’s address is slightly altered from a legitimate one.

C – Consider the Greeting
Is the greeting generic or unusual? Phishing emails often use impersonal greetings like “Hello Ma’am!” or “Dear Customer” rather than addressing you by name.

U – Unpack the Message
Does the email create a sense of urgency, encouraging you to click a link or download an attachment? Be wary of anything that seems too good to be true or pressures you to act fast.

R – Review for Errors
Are there grammatical mistakes or odd spellings? Phishing emails often contain errors that wouldn’t be present in legitimate business communications.

E – Evaluate Links and Attachments
Always hover over links to check their destination before clicking. Avoid opening attachments from unknown senders or those you weren’t expecting.

Protect Your Business From Phishing Attacks

Even with the S.E.C.U.R.E. Method in place, it’s essential to have a cybersecurity expert monitoring your network and blocking spam emails before they reach your team. Phishing attacks are frequent and effective, but with the right precautions, you can stay one step ahead of cybercriminals.

If you need assistance training your employees on cybersecurity best practices, implementing a strong security system, or simply want an expert to assess your current setup for vulnerabilities, we’re here to help. Give us a call at 214-550-0550 or click here to schedule a consultation with our team.

Don’t wait until it’s too late—protect your business from phishing scams today!

Mark your calendars! Microsoft will stop supporting Windows 10 on October 14, 2025. While your PCs will still function after this date, Microsoft will no longer offer essential services such as:
Security updates
Non-security updates
Technical support

Without these services, your system becomes more vulnerable, so it’s crucial to prepare for the change.

Why This Matters for Business Owners

Increased Security Risks
Once support ends, your computer will no longer receive security patches, leaving it exposed to cyber threats like viruses, malware, and hackers. Protecting your business data should be a priority, and upgrading to a supported version of Windows is a critical step.

Software Compatibility
Many software applications are updated to stay compatible with the latest operating systems. After Windows 10 reaches its end-of-life, you might find that some of your key programs stop working smoothly—or at all.

Compliance Concerns
If your business handles sensitive information or adheres to industry regulations, using an unsupported operating system could lead to compliance violations. Staying current is essential to avoid fines or legal issues.

What Are Your Options?

Microsoft recommends transitioning to a newer version of Windows before the October 2025 deadline. However, not all devices running Windows 10 are compatible with Windows 11. If your hardware doesn’t meet the requirements, you’ll encounter errors during the upgrade process.

If your device isn’t Windows 11 compatible, consider the following:

Purchase a new PC that meets the Windows 11 hardware requirements

Pay for extended Windows 10 security updates, available for up to three years (but no longer free)

Switch to an alternative OS like Linux

Use a technical workaround to upgrade incompatible PCs

Ignore the deadline (we do not recommend this option)

Whatever you choose, back up your data before making any changes. This protects your important files and minimizes the risk of data loss during the upgrade process.

Plan Ahead

While there’s speculation that Microsoft may extend the support deadline, it’s not a guarantee. Waiting until the last minute could put your business at risk, leaving you without security protections.

The best approach is to consult with your IT provider to determine the right strategy. If your computers are relatively new, paying for ongoing security updates may be a cost-effective solution. On the other hand, if your devices are older, investing in new PCs might be more practical. A tech expert can help ensure a smooth transition with minimal disruption to your operations.

Need Help with Your Transition?

Our team is here to assist you. Schedule a FREE 15-Minute Discovery Call to discuss the next steps for a smooth transition to Windows 11. Contact us at 214-550-0550 or click here to schedule your consultation.

Don’t wait—start planning now to ensure your business remains secure and compliant!

When 8.5 million Windows devices—including those used by airlines, banks, and hospitals—suddenly displayed the dreaded “Blue Screen of Death,” panic set in. Many feared a massive cyber-attack. Thankfully, that wasn’t the case, but the true cause of the outage is equally alarming and something every business owner should take seriously.

What Exactly Happened?

On July 19, 2024, millions of Windows devices crashed, triggering an endless reboot cycle and displaying the infamous blue screen. The result? Massive global disruptions. Airlines were forced to ground flights, leaving thousands of passengers stranded in airports. Electronic health record systems went offline, causing delays and cancellations of non-emergency medical procedures. Major banks also experienced outages, leaving customers unable to access their accounts. These are just a few examples of the chaos caused by what’s now being called the largest IT outage in history. It almost brings back memories of the Y2K scare, doesn’t it?

If It Wasn’t a Cyber-Attack, What Was the Cause?

While many suspected a cybersecurity breach, the real culprit was a flawed software update from CrowdStrike, a leading cybersecurity company. The issue originated with a routine sensor update for their endpoint detection and response (EDR) platform, Falcon. Unfortunately, a flaw in the update—specifically for Microsoft Windows—caused widespread system crashes due to its deep integration with the Windows OS.

So, how could a multibillion-dollar company release an update with such a critical flaw? CrowdStrike representatives later revealed that a gap in their testing process was to blame. A flaw in the content validator tool failed to detect the problem, leading engineers to believe the update was safe for release. As a result, the update caused Windows systems to enter an endless reboot cycle, leading to the widespread “Blue Screen of Death” issue.

CrowdStrike acted quickly to fix the problem, but the damage was already done. Insurers now estimate that the outage will cost US Fortune 500 companies over $5.4 billion.

Why Should This Matter to You?

This incident highlights just how reliant we are on technology and how a single software flaw can have a catastrophic impact on global IT infrastructure. When it comes to managing your company’s technology, you can’t afford to cut corners. Here are three key steps to protect your business:

1. Work with a Reliable, Knowledgeable IT Professional
   Even large organizations like CrowdStrike can make mistakes. However, you can minimize your risk by partnering with an experienced IT team. Their expertise in managing updates, backups, and continuous monitoring ensures your operations run smoothly and prevents minor issues from escalating into major disasters.
2. Ensure Rigorous Software Testing
   A trustworthy IT team should handle this for you. Rigorous testing can catch flaws before they cause widespread issues, safeguarding your business from potential disruptions.
3. Develop a Robust Disaster Recovery Plan
   Mistakes and unexpected issues are inevitable, but being prepared can make all the difference. A comprehensive disaster recovery plan enables you to take swift action, keep your business running, and minimize damage. Many organizations affected by the CrowdStrike outage had to halt operations because they lacked a solid plan. Don’t be caught off guard—have a Plan B in place.

Don’t wait for a crisis to take action. Ensure your business is prepared by partnering with an experienced IT team. We offer a FREE, no-obligation Network Assessment, where our experts will evaluate your current systems, identify potential vulnerabilities, and create a comprehensive plan to protect your business from future outages. Your company’s security and continuity depend on it.

Call us at 214-550-0550 or click here to book your FREE Network Assessment today!

Imagine if the software your organization relies on to close deals and pay employees suddenly went down, and you had no idea when it would be fixed. Could you continue doing business? How much money would you lose? Unfortunately, in June, this scenario became a reality for over 15,000 US- and Canada-based car dealerships when two cyber-attacks targeted the popular industry software provider, CDK Global.

These attacks shut down sales, financing, and payroll systems for thousands of dealers, forcing them to either halt business or revert to old-fashioned pen-and-paper methods. This incident is a wake-up call for all small business owners, emphasizing the importance of robust cybersecurity measures.

What Happened?

The initial attack occurred on the evening of Tuesday, June 18. Once it was detected, CDK Global immediately took the system offline to investigate the issue. The system was back up and running the following day until a second incident occurred, leading the company to take the system offline again. It’s believed the system was brought back online prematurely, before all compromised areas were discovered, resulting in the second attack. Cybersecurity experts predict it could be weeks before the system is fully operational again.

While some businesses reverted to manual processes, this incident highlights the vulnerabilities that come with relying on digital systems. In our ever-advancing digital world, where most transactions are just a few clicks away, significant issues arise when systems go offline. Critical parts of the business process, such as completing transactions, managing payroll, and interacting with financial institutions, can come to a standstill. Until the systems are back online, many business operations cannot be fully completed, leading to delays and potential financial losses. Business owners know that there is no sale until the check clears the bank!

So, What’s Next?

CDK Global didn’t disclose the exact cause of the attack. Whether that was intentional or they are still unsure remains to be seen. Their security team will need to meticulously comb over every area of the business to determine exactly what was compromised. It’s often difficult for large companies to get the details about cyber-attacks 100% correct after the first review because they may not be able to determine the extent of an attack’s network penetration if there are multiple points of vulnerability.

In the meantime, businesses need to take a hard look at their systems for selling and operational continuity. Will they be prepared to continue doing business if and when this happens again?

This incident should serve as a wake-up call for all business leaders. If you don’t have a business recovery and continuity plan in place, you’re putting yourself at risk. And if you do, you need to ask yourself if it is high-quality, tested often, and able to handle a large-scale attack where multiple operational systems are disabled. If the answer is no, it’s time to do something about it.

What You Can Do

We offer a FREE Security Risk Assessment that will achieve two important things:

Analyze Your Network for Vulnerabilities: We’ll show you if and where an attack can occur, and offer solutions to patch vulnerabilities so you’re not setting yourself up to be the next cyber-attack victim.

Determine a Continuity or Recovery Plan: Cybersecurity is an essential and necessary element of doing business, but even the most robust security solutions are not 100% foolproof. This means you must have a plan to bounce back and continue doing business if something should happen to your network or to a third-party piece of software you rely on, like CDK.

To get started, call our office at 214-550-0550 or click here to book your FREE Security Risk Assessment now.

Summer is a popular time for vacation travel. If you’re looking to squeeze in any last-minute trips, there is a scam circulating that you need to be aware of. As costs for everything from food to travel continue to increase, the logical step is to search for the best deals online to book a memorable trip without breaking your budget. According to Booking.com, cybercriminals have decided to capitalize on this need and are now using one scarily convincing, AI-generated phishing e-mail that can cost victims way more than their vacation fund. Booking.com’s CISO, Marnie Wilking, shared that the organization has seen a 500% to 900% increase in travel-related scams in the past 18 months using this malicious tactic.

How Are These Scammers Doing It?

Phishing e-mails have existed since the dawn of the Internet, but AI tools like ChatGPT are making it increasingly easy to create realistic and professional scam e-mails that are more likely to trick readers. In the past, phishing e-mails were riddled with red flags such as spelling and grammatical errors. With the rise of AI, it’s easier for cybercriminals to pump out dozens of seemingly legitimate e-mails that often go undetected by software and readers.

Here’s how they work:

Scammers will use sites like Booking.com or Airbnb.com that allow people to list their places as short-term rentals. The scammers send out e-mails offering incredible rates or time-sensitive deals on nonexistent properties. After someone pays, the cybercriminals will either disappear with the money, leaving the renter without a place to stay, or use follow-up e-mails to collect additional “fees” or “charges” before vanishing.

To be clear, these vacation-focused phishing scams are NOT new. The problem now is that, with AI, more people are falling for them because these e-mails are becoming more convincing.

What Can You Do?

Vacationers can take several key steps to ensure they’re not being duped.

1. Use Two-Factor or Multifactor Authentication: Having a confirmation code sent to your phone every time you log in will help prevent phishing attacks and credential theft.
2. Avoid Clicking on E-mail Links: If you receive an e-mail promoting a too-good-to-be-true deal, remember, it is likely too good to be true! Go to the website and search for the special. If you can’t find it, there is a chance you will avoid a scam.
3. Verify Contact Information and Reviews: Before booking ANY property online, make sure contact information and reviews are readily available. Have other verified users stayed at the property? If so, it’s less likely to be a scam.
4. Use Credit Cards for Online Purchases: Using debit cards that are linked directly to your bank account is dangerous. When theft occurs from your debit card, it is difficult to get your money back – if you get it back at all. Using a credit card provides an additional layer of protection.

The most important thing is to stay vigilant. Analyze every e-mail offer you receive and follow cybersecurity best practices. Standard security software can help detect some of these scam e-mails, but often not all of them, so it’s important to be cautious and look for red flags.

Personal scams may ruin a vacation, but business breaches can cost you and your family their livelihood. To keep your network secure, call us at 214-550-0550 or click here to book a FREE 10-minute discovery call with our cybersecurity experts, who can help you create a plan that protects you. We are here to help! Enjoy a well-deserved break this summer and remember to be cybersmart.

Just when you think cybercriminals will run out of new ideas for how to scam people, they find a way to get creative and surprise you. Now they’re faking data breaches, hoping to steal money from unsuspecting business owners and dark web data buyers alike.

Earlier this year, Europcar, an international car rental company from France, discovered a cybercriminal selling private information about its 50 million+ customers on the dark web. The car rental company immediately launched a formal investigation, only to find that the data being sold was fake. The information was falsified, most likely done with the help of generative AI.

How Did They Do It?

With AI-powered tools like ChatGPT, it’s easy for cybercriminals to generate realistic-looking data sets quickly. Smart cybercriminals do their research and design data sets that look complete, with correctly formatted names, addresses, and emails, and can even include local phone numbers to match. They will also leverage online data generators that can quickly create large, fake data sets designed for software-testing purposes to develop authentic-looking data sets. Once they have these, hackers choose the target they claim to have stolen the data from and post the information on the dark web.

Why Are They Doing It?

Why would a hacker fake a data breach? There are a couple of reasons, besides reaping the same benefits without the work of hacking a network’s security system.

1. Creating Distractions: One of the best ways to get a company to let down its defenses is to focus on something else, like finding a breach in its system. The company will be so intent on finding where a hacker was already able to get into its network that it will likely miss an attack from a different angle.
2. Bolstering Their Reputation: Reputation is highly valued within the hacker community. Targeting a well-known brand publicly is a way for them to earn notoriety and get noticed by other hacker groups.
3. Manipulating Stock Prices: For publicly traded companies, a data breach can cause a rapid 3% to 5% (or more) drop in the stock. This can cause widespread panic, allowing cybercriminals to manipulate stocks for financial gain.
4. Learning Security Systems: Faking a data breach can allow cybercriminals to gain insight into the company’s security processes to prevent, detect, and resolve attacks. Knowing threat response time and security capabilities can help them fine-tune their attack strategy.

Why Is This Bad For Businesses If The Data Is Fake?

By the time the public is made aware that the information is fake, the damage is already done. For example, in September 2023, Sony was targeted by a ransomware group that announced it had breached the company’s network and acquired its data. The breach was all over the news, where reporters repeatedly dragged Sony’s brand through the dirt, and by the time the investigation concluded that the hacker’s claim was false, irreparable damage had been done to their name.

What Can You Do To Prevent Fake Data Breaches?

If you want to avoid being the victim of a fake data breach, these are good steps to follow:

1. Actively Monitor The Dark Web: You or your cybersecurity team should routinely monitor the dark web. If you encounter an attacker selling your data, investigate the claim immediately to prevent extensive damage.
2. Have A Disaster Recovery Plan In Place: Don’t let your team wonder what they should say if a data breach occurs. This communication plan needs to be developed in advance and fine-tuned if or when a breach occurs.
3. Work With A Qualified Professional: You are in business to do what you love to do, not deal with IT-related issues. Working with a cybersecurity expert who knows what to look for, how to resolve issues, and how to prevent breaches takes tasks off your plate and gives you peace of mind. They will ensure #1 and #2 are taken care of.

Data breaches can create enormous problems for your organization. Get ahead of the issue and have someone proactively monitor your network and the dark web to keep you secure. If you want a no-obligation, third-party opinion on whether or not your network is vulnerable to an attack or properly secured, we’re happy to provide one for FREE. Call us at 214-550-0550 or click here to book your FREE Security Risk Assessment with one of our cybersecurity experts.