Hackers may have stolen the Social Security numbers of every American. Here’s how to protect yourself:
In a significant data breach, sensitive information, including Social Security numbers, has been leaked, potentially fueling a wave of identity theft and fraud, according to cybersecurity experts
Social Security numbers of every American
Reported by Jon Healey, Deputy Editor, Fast Break Desk
August 14, 2024 — Approximately four months after a notorious hacking group claimed to have infiltrated a major data broker, a large portion of the stolen sensitive personal information is reportedly being offered for free on an online marketplace specializing in stolen data.
The breach, involving Social Security numbers and other sensitive data, could facilitate widespread identity theft, fraud, and other criminal activities, warns Teresa Murray, consumer watchdog director for the U.S. Public Information Research Group. “If this is indeed the full dossier on everyone, it is considerably more alarming than previous breaches,” Murray stated in an interview. “This should be a major wake-up call for individuals who haven’t been taking necessary precautions.”
A class-action lawsuit filed in U.S. District Court in Fort Lauderdale, Florida, alleges that in April, the hacking group known as USDoD stole personal records of 2.9 billion individuals from National Public Data, a company that provides personal information for background checks to employers, private investigators, and staffing agencies. The hackers reportedly attempted to sell the data, which includes records from the United States, Canada, and the United Kingdom, for $3.5 million on a hacking forum, as noted by a cybersecurity expert on the platform X.
Bloomberg Law was among the first to report on the lawsuit.
Recently, a purported USDoD member known only as Felice announced on a hacking forum that they were offering “the full NPD database,” according to a screenshot shared by BleepingComputer. The database allegedly contains approximately 2.7 billion records, each including a person’s full name, address, date of birth, Social Security number, and phone number, along with alternate names and birth dates.
Related: AT&T Security Breach Impacts Nearly All Customers
In a 2022 security breach, nearly all AT&T’s cellular, mobile virtual network operators, and landline customers had their data compromised. As of July 23, 2024, the company has launched an investigation and engaged cybersecurity experts to assess the situation.
Despite these claims, National Public Data has not responded to requests for comment or formally notified individuals about the alleged breach. In email communications, the company acknowledged awareness of third-party claims and stated they are investigating the issue. The email also mentioned that the company has “purged the entire database” and deleted any “non-public personal information,” except for records required by legal obligations.
Several cybersecurity-focused news outlets have examined portions of the leaked data and reported that it appears to include real people’s information. If the leaked data is authentic, it poses significant risks. Here are some steps you can take to protect yourself:
- Monitor Your Credit Reports: Regularly check your credit reports for any unusual activity.
- Use Strong, Unique Passwords: Ensure all your accounts have strong, unique passwords.
- Enable Two-Factor Authentication: Add an extra layer of security to your accounts.
- Be Wary of Phishing Scams: Avoid clicking on suspicious links or providing personal information via email.
- Freeze Your Credit: Consider freezing your credit to prevent unauthorized access.
Stay informed and take proactive steps to safeguard your personal information in light of these developments.
For free online tools click here
For free online tools click here