National Public Data, a leading background-check company, has confirmed a data breach that exposed millions of Social Security numbers, causing widespread concern. The Florida-based company detected suspicious activity in its network in late December 2023, and the data leak began in April 2024, continuing throughout the summer. The breach involved a third-party hacker and compromised personal information, including names, email addresses, phone numbers, Social Security numbers, and mailing addresses.
The company has cooperated with law enforcement and conducted a review of the affected records. However, it remains unclear how individuals can determine if they were impacted by the breach. National Public Data advises people to monitor their financial accounts for any unauthorized activity.
Cybersecurity experts have been aware of the leak since April, but the company remained silent until recently when the exposed Social Security numbers gained significant attention on social media. National Public Data, which provides criminal records and background checks, has faced criticism for its lack of transparency.
In April, a hacker known as USDoD posted a database on a criminal marketplace claiming it contained 2.9 billion records of U.S. citizens, allegedly obtained from another hacker named “SXUL.” The database, offered for $3.5 million, includes names, decades of address history, and Social Security numbers. Experts have confirmed the accuracy of much of the information, though the database contains duplicates and covers both living and deceased individuals. It’s estimated that the breach involved about 899 million unique Social Security numbers.
The breach has already led to lawsuits, including one filed in the U.S. District Court for the Southern District of Florida. Cybersecurity experts argue that this incident highlights the need for stricter data privacy regulations and better enforcement to protect individuals from the long-term consequences of such breaches.
