National Public Data Published Its Own Passwords
Summary: KrebsOnSecurity reports that recordscheck.net, a background search service sharing access to National Public Data's consumer records, published an archive named members.zip on its homepage containing plain text administrator usernames and passwords and source code until August 19. The archive's passwords matched credentials exposed in earlier breaches tied to NPD founder Salvatore "Sal" Verini, who said the file was an old version with non-working code and that the site would cease operations within a week or so.
Key Takeaway: The same breach exposed names, addresses, phone numbers and in some cases email addresses for more than 272 million people, and the leaked source code shows Records Check pulled background reports by querying NPD's database and records at USInfoSearch - so the credentials sitting in a public zip file sat behind data on hundreds of millions of Americans.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026