Data Broker Giants Hacked by ID Theft Service
Summary: A seven-month KrebsOnSecurity investigation found that an identity theft service called SSNDOB, which sold SSNs and background reports for 50 cents to $2.50 per record, was fed by a botnet with infected systems inside LexisNexis, Dun & Bradstreet and Kroll Background America. The botnet dashboard showed malware placed on two LexisNexis Web servers as early as April 10, 2013, on Dun & Bradstreet systems by March 27, 2013, and files at HireRight dating to at least June 2013, while the malware went undetected by all 46 antivirus tools tested in early September.
What you should know: SSNDOB's 1,300 customers spent hundreds of thousands of dollars pulling more than 1.02 million unique SSNs and nearly 3.1 million birth records, and the service could still order background reports through LexisNexis more than 10 days after the infected servers were disabled.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026