Introduction

In April 2024, a cybersecurity company, Hackmanac, claimed that 2.9 million personal data records were for sale from people in the United States, Britain, and Canada. Sensitive information like names, dates of birth, phone numbers, addresses, and social security numbers were leaked. The information was supposedly taken from National Public Data, a Florida-based background-checking company owned by Jerico Pictures, Inc. The company noted on its site that a potential leak of personal data was reported in both April and summer of 2024. The company also stated that a third party was trying to gain access to the data in late December of 2023.

A hacking group named USDod claimed responsibility in April and offered to sell the database for $3.5 million. It was confirmed that the 277.1 GB database was real by VX-Underground, a website focused on cybersecurity.

National Public Data has not released a public statement regarding the breach but stated that they are aware of claims about the personal data and are launching investigations.

Impact of this Breach

Those affected would be exposed to potential identity theft since both birthdates and Social Security numbers were compromised. Cliff Steinhauer, Director of Information Security at National Cybersecurity Alliance, stated “...that’s still all you need to set up most types of accounts – getting loans, setting up bank accounts, renting or buying a car, those types of things.”

This breach made people vulnerable to phishing attacks, identity theft, and fraud, among many other possible attacks.

How to Protect Yourself

There are many ways to protect yourself from fraud and identity theft:

  • Freezing Credit. Monitor and freeze your credit with all major agencies: Equifax, Experian, and TransUnion. This would ensure no one could take a loan or open a new account in your name. You would still be able to use your accounts and cards. Freezing your credit protects against many identity theft concerns, and is very easy to unfreeze as well. To open a new card or account, you would just need to unfreeze your credit with the agencies, which can be as simple as logging in and clicking a button.
  • Fraud Alerts. Putting fraud alerts on credit reports adds an extra layer of authentication making sure that the person requesting the credit report is who they say they are. Credit reports are free and allow you to monitor your credit activity.
  • Two-Factor Authentication. Having two-factor authentication in place will make it harder for hackers to gain access to your accounts, even if they have access to sensitive data. This adds another layer of protection to both your accounts and personal data.
  • Stay Updated. Look out for news articles about data breaches. This ensures that you know about breaches as soon as possible and can take the necessary precautions to protect your data.
  • Monitor for Signs of Identity Theft. If you notice signs of identity theft like unfamiliar financial activity or a drop in your credit score, contact the Federal Trade Commission (FTC) and the police.

Conclusion

Our information is important, especially those that link us to our identity. Be active and monitor your accounts. If you were one of those who were affected, take the necessary steps to protect your identity and your credit. Although it doesn’t seem that data breaches are stopping anytime soon, taking action helps protect your information and prevent yourself from becoming a victim of identity theft or fraud in the event that your data is stolen.

Sources

https://www.nytimes.com/2024/08/15/business/social-security-numbers-stolen-hack.html

https://www.latimes.com/california/newsletter/2024-08-18/your-social-security-number-may-have-been-leaked-protect-yourself-essential-california

https://thehill.com/homenews/4831573-your-social-security-number-may-have-been-leaked-should-you-freeze-your-credit/

Hayden Duplantier, Associate Information Security Analyst

Hayden is beginning his cybersecurity career as an Associate ISA on Team Atlas, starting out performing remote social engineering tests. He is currently earning a Bachelor of Science in Computer Science from Louisiana State University, expected to graduate in May 2025. He is currently working toward his Security+ certification, and also plans to pursue a Masters in Cybersecurity from LSU.