In August 2024, National Public Data, a company that provides background check services, revealed a major data breach that occurred in December 2023, exposing around 2.9 billion records, affecting at least 135 million people. This data includes sensitive information such as full names, Social Security numbers, email addresses, phone numbers, addresses, and more. Attempts to sell this data on the dark web have already been confirmed, with initial asking prices reaching $3.5 million.
There have been several suits filed in federal court against National Public Data. In one such case, filed in August, lawyers claim that NPD “breached its duties by, among other things, failing to implement and maintain reasonable security procedures and practices to protect individuals’ PII (personally identifiable information) from unauthorized access and disclosure,” furthermore it is claimed that NPD “has not provided any notice to affected individuals.”
The US Department of Justice and House of Representatives have begun investigations into this incident as well as the Attorneys general of Missouri and Maine.
Check If You’ve Been Affected:
- Visit this link to see if your information was part of the breach.
- Do not respond to unsolicited emails, calls, or texts claiming to help you with this data.
Steps to Take If You’re Affected:
- Freeze Your Credit:
- This prevents new loans or credit cards from being issued in your name. You can freeze and unfreeze your credit for free with Equifax, Experian, and TransUnion.
- Check Your Credit Reports:
- Get a free credit report from each of the three major agencies and review them for any unusual or suspicious activity.
- Monitor Financial Accounts:
- Keep an eye on all financial accounts, including investments, banking, and mortgages. Report any suspicious activity to your financial institutions immediately.
- Change Your Passwords:
- Update passwords for all your financial and online accounts, including utility companies and cell phone providers. Use strong, unique passwords and enable two-factor authentication where possible.
- Use a Password Manager:
- Consider using a password manager to securely store and generate complex passwords.
- Be Cautious of Phishing:
- Be on alert for phishing attempts that may use information from the breach. Verify the authenticity of any suspicious communications and avoid responding to potential scams. Contact institutions directly to confirm any solicitations.
Stay vigilant and proactive to protect your personal information following this breach.