In September 2024, National Public Data confirmed that the personal information of millions of individuals was compromised by a hacker. The exposed data includes names, email addresses, mailing addresses, phone numbers, and even Social Security numbers, impacting up to 2.9 billion people. Here’s what you need to know.
What Happened?
National Public Data, a consumer data broker known for providing criminal records, background checks, and other data services to various industries such as private investigators, HR departments, staffing agencies, and government bodies, experienced a significant breach. The breach is believed to have begun in December 2023, when a third-party actor gained unauthorized access.
By April 2024, a cybercriminal known as “USDoD” leaked the stolen data online in a criminal forum. In August, the dataset was reposted for free on several breach forums, allowing anyone to download and access it.
The breach exposed sensitive personal information, including names, addresses, phone numbers, email addresses, and Social Security numbers. In some cases, it also revealed previous addresses and alternate names, including data for some deceased individuals. While an official notice filed in Maine suggested that 1.3 million records were breached, ongoing lawsuits claim as many as 2.9 billion records may have been affected.
Although much of the released data is said to be public or easily accessible online, experts warn that having all this information centralized poses significant risks, particularly for identity theft and fraud.
Why Is This Breach Concerning?
Even though some of the information may be found online, having critical data consolidated in one place makes it easier for criminals to exploit. This data can be used to apply for credit cards, loans, or open new bank accounts fraudulently.
Additionally, seemingly harmless information, like childhood street names or the last four digits of a Social Security number, is often used as answers to security questions, which hackers can leverage to bypass authentication measures and gain access to your accounts.
There is also an expected increase in phishing and smishing (phishing via SMS) attempts using the compromised data.
Can You Be Affected If You’ve Never Heard of National Public Data?
Yes. Even if you’ve never directly interacted with National Public Data, organizations, businesses, landlords, and other entities may have used their services to obtain information about you.
How to Protect Yourself
Step 1: Check if Your Data Was Exposed
Use tools like https://npd.pentester.com to determine if your information was compromised. If your data has been exposed, take immediate action.
Step 2: Freeze Your Credit and Monitor Your Report
One of the most effective ways to protect your identity is to freeze your credit. This prevents criminals from opening new lines of credit in your name. Contact the three major credit bureaus—Equifax, TransUnion, and Experian—to request a credit freeze. The process is free and takes just a few minutes per bureau. It’s also a good idea to freeze the credit of others in your household who are over 18, as anyone with a Social Security number could be at risk.
Once you’ve obtained a copy of your credit report, review it for unauthorized activities and set up alerts for future monitoring.
Step 3: Be Cautious of Phishing Scams
With the compromised data, cybercriminals may attempt to scam you through phone calls, text messages, emails, and social media. Be vigilant and avoid responding to suspicious messages.
Protecting Your Business
Data breaches can have severe impacts on businesses, and protecting your company’s sensitive information is more important than ever. AZCOMP Technologies is here to help you navigate these challenges. With our expertise in cybersecurity, we offer a FREE Security Risk Assessment to evaluate if your data has been compromised or if your network is at risk. Our comprehensive assessment will give you a clear roadmap for strengthening your security measures and safeguarding your business’s data.
Don’t leave your business vulnerable—contact us today to schedule your assessment and take the first step toward securing your network.
About AZCOMP Technologies:
AZCOMP Technologies of Mesa, AZ, is a leading provider of Managed IT Services, cybersecurity, and technology solutions for businesses. AZCOMP’s purpose is to unleash phenomenal experiences through innovative tech solutions. This means that we help businesses achieve top-notch technology results while delivering phenomenal service.
AZCOMP Technologies has provided business technology solutions and cybersecurity services since 2000. AZCOMP offers full-service managed IT services in Phoenix, Mesa, Tempe, Scottsdale, Chandler, Gilbert, Apache Junction, Queen Creek, San Tan Valley, Gold Canyon, and the entire state of Arizona. We also provide limited IT services to businesses across the US! Request your IT consultation today!
