In September 2024, National Public Data confirmed a massive data breach that compromised the personal information of millions. The exposed data includes names, email addresses, mailing addresses, phone numbers, and Social Security numbers of up to 2.9 billion people. Here’s what you need to know about this breach and how to protect yourself.

What Happened?

National Public Data, a consumer data broker that provides criminal records, background checks, and other information to private investigators, consumer public record sites, HR departments, staffing agencies, and the government, was hacked. The breach is believed to have started in December 2023 when a third-party hacker tried to infiltrate the system.

In April 2024, a cybercriminal known as “USDoD” posted the stolen data on an underground criminal forum. By August 6, this data resurfaced and was posted for free on several breach forums, making it available for anyone to download.

The breach included sensitive information like names, addresses, phone numbers, email addresses, and Social Security numbers, some belonging to deceased individuals. In many cases, it also included past addresses and alternate names.

While the official data breach notice filed in Maine estimated that 1.3 million records were compromised, lawsuits suggest the breach may have exposed as many as 2.9 billion records.

Though experts are finding some inaccuracies in the leaked data, and much of it is already publicly available, there are still significant risks associated with this breach—especially considering the exposure of Social Security numbers.

Why Is This Breach Dangerous?

Even though much of the compromised data may be publicly accessible, having all of this information in one place makes it easier for cybercriminals to commit identity theft. Here are some specific risks:

Identity Theft: Criminals can use this information to apply for credit cards, loans, or open new bank accounts in your name.

Bypassing Security Questions: Information like childhood street names or the last four digits of your Social Security number, often used in security questions, can help hackers bypass authentication to access your accounts.

Increase in Phishing and Smishing Attacks: Experts predict a surge in phishing emails and SMS phishing (smishing) attempts as criminals exploit this data to trick victims.

Could You Be Affected?

Yes. Even if you’ve never heard of National Public Data or used their services, organizations like landlords, employers, and other businesses may have utilized their resources to access information about you.

How to Protect Yourself

If your information has been compromised in the breach, take these steps immediately to protect yourself:

1. Check If Your Data Was Exposed

Use tools like this one to see if your information was part of the breach. If it was, act quickly.

2. Freeze Your Credit

One of the best ways to protect your identity is to freeze your credit and set up alerts. This prevents criminals from opening new lines of credit in your name. Contact the three major credit bureaus—Equifax, TransUnion, and Experian—to request a freeze. The process is free and takes just a few minutes for each bureau.

It’s also a good idea to freeze the credit of other household members over 18 years old. Anyone with a Social Security number is vulnerable to identity theft after a breach of this size.

Once your credit is frozen, review your credit report for any unauthorized activity and set up alerts for future monitoring.

3. Stay Alert for Phishing Scams

Cybercriminals will likely use this leaked information to target victims through phishing emails, phone calls, text messages, and even social media scams. Be vigilant, and never click on suspicious links or share sensitive information with unknown sources.

Protect Your Business

A data breach is devastating for both the businesses that get hacked and the individuals whose data is exposed. As a business owner, it’s critical to take the necessary precautions to safeguard your organization’s sensitive data.

If you’re concerned about whether your business or personal information has been leaked or if your network is vulnerable to future breaches, we can help. Schedule a FREE Security Risk Assessment with our team. We’ll conduct a comprehensive review of your network and provide a blueprint for strengthening your security.

To book your assessment, call us at 214-550-0550 or click here.

Stay vigilant, protect your data, and take steps today to safeguard your identity.