A huge global data breach has potentially compromised the private data of millions of people.
Social Security numbers, addresses, and other sensitive information may have been exposed, at least as far as Americans go, according to a recent lawsuit.
The breach, which took place around April 2024 and reportedly involved the data broker National Public Data (NPD), has raised serious concerns about identity theft and financial fraud around the world.
A lawsuit, filed on August 1 by California resident Christopher Hofmann, claims that hackers from a group known as USDoD accessed and leaked unencrypted data from NPD, Bloomberg Law reported.
The compromised data includes detailed records with full names, Social Security numbers, addresses, and phone numbers. A hacker had initially sought $3.5 million for the stolen data but later released it for free on a hacking forum, according to a report by the tech site Bleeping Computer.
The breached data consists of approximately 2.7 billion records. While the number of affected individuals is unclear, experts suggest that almost every person with a Social Security number could be impacted.
Based in Coral Springs, Florida, NPD provides background checks and other data services. The company acknowledged that a third party “bad actor” accessed its data but has not yet notified affected individuals. The breach was first detected in late December 2023, with significant leaks occurring in April and summer 2024, according to CBS News.
Security experts advise that individuals take immediate steps to protect their information. This includes freezing credit reports with major bureaus (Experian, Equifax, and TransUnion), enabling multiple authentication methods, and monitoring for any unusual activity on their financial accounts.
Additionally, using strong passwords and updated security software can help safeguard against further security breaches in the future.
USA Today reported that the cybersecurity company Pentester has obtained the leaked data and developed a tool to help individuals check if their information has been compromised. It can be accessed by clicking here.