Forest Global Training Partners

Cyber Risks · Krebs on Security

National Public Data.com Hack Exposes a Nation’s Data

Summary: On July 21, 2024, users of the cybercrime forum Breachforums released more than 4 terabytes of data they claimed was stolen from NationalPublicData.com, a Florida-based consumer data broker and background check company. HaveIBeenPwned and vx-underground tied the leak to a 2.9 billion-row data set first offered for sale in April 2024 by a cybercriminal known as USDoD for $3.5 million, and Atlas Data Privacy Corp. counted 272 million unique SSNs in the records.

Bottom line: USDoD told KrebsOnSecurity the data was originally stolen in December 2023 by a hacker using the handle SXUL and had traded hands several times before the public leak, so the exposure predates any notification. With 272 million unique SSNs in a set that includes names and home addresses, the records feed directly into identity theft and account takeover operations that are already staffed and running at scale.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related