3 Billion Social Security Numbers Were Stolen By Hackers

A potentially historic data breach could impact millions, if not billions, of people worldwide. National Public Data (NPD), a company known for collecting and reselling personal information for background checks, is facing a proposed class-action lawsuit following claims that its database was hacked, exposing sensitive data on around 3 billion people. According to reports from Bloomberg Law and BleepingComputer, the hacker group responsible, known as USDoD, listed the stolen database for sale on the dark web back in April for $3.5 million.

Get our free mobile app

What Was Allegedly Stolen?

The stolen database reportedly contains 2.9 billion rows of information, including Social Security numbers, mailing addresses, and possible aliases for individuals in the US, Canada, and the UK. However, many of these records are duplicates, so the true number of people affected is still unclear. Early assessments by cybersecurity experts suggest that the data mainly belongs to those who have not opted out of data aggregation services, bolstering claims that National Public Data (operating under the name Jerico Pictures, Inc.) is the likely source.

How Legitimate is This Leak?

Troy Hunt, operator of the well-known breach notification service Have I Been Pwned, looked into the situation and described the data as “informational only” with some inconsistencies. For instance, while some files contain Social Security numbers, they lack email addresses. Meanwhile, another set of data reportedly includes 100 million unique emails but with information that seems largely inaccurate. Even Hunt found his own email address listed but confirmed the attached data was incorrect.

Get our free mobile app

Given these discrepancies, Hunt emphasized that this breach might not require immediate panic. While concerning, the accuracy and legitimacy of the stolen data remain murky.

What Should You Do if You're Affected?

If you’re notified that your information is included in the breach, experts recommend closely monitoring your credit report and being cautious of phishing attempts. Scammers often use leaked information to trick people into revealing even more sensitive data.

For now, this breach is more of a developing story rather than a full-blown crisis. As more details emerge, it’s crucial to stay informed and take necessary precautions to safeguard your personal information.