Nearly 3 Billion People Hacked in National Public Data Breach. What You Need to Know
A database of almost 3 billion people's personal information stolen from National Public Data, a background checking company, was for sale on the dark web for $3.5 million.
![Silhouette of hacker wearing hood using laptop computer with glow in the dark blue skull and crossbones logo in dark room on blue binary code number background](https://cdn.mos.cms.futurecdn.net/SmEtAXRvWTH5M4Q9DamdTb-415-80.jpg)
Nearly three billion individuals had their personal data leaked during a cyber attack targeting National Public Data (NPD), a background checking service also known as Jerico Pictures. The data breach is one of the biggest in history and surfaced when a proposed class action lawsuit was filed in early August.
The lawsuit alleges that personal data from nearly three billion people was leaked during a cyber attack targeting the company in April. Initially, neither NPD, nor Jerico Pictures confirmed the cyberattack.
But as of late August, NPD has confirmed the cyberattack and published a breach disclosure to its company website acknowledging a third-party had attempted to access data in the NDP's possession in December before appearing to leak the data in April and this summer.
![https://cdn.mos.cms.futurecdn.net/hwgJ7osrMtUWhk5koeVme7-200-80.png](https://cdn.mos.cms.futurecdn.net/hwgJ7osrMtUWhk5koeVme7-320-80.png)
Sign up for Kiplinger’s Free E-Newsletters
Profit and prosper with the best of expert advice on investing, taxes, retirement, personal finance and more - straight to your e-mail.
Profit and prosper with the best of expert advice - straight to your e-mail.
Until the NPD breach, the Yahoo data breach in 2013 stood as the worst cyberattack in history. The first attack occurred in 2013, with more to follow over the next three years. Only after Verizon bought out Yahoo in 2017, did the actual number of records affected come to light. It was determined that all 3 billion of Yahoo's accounts were affected. That particular breach included the theft of names, email addresses, phone numbers and birthdates, but did not involve financial information.
What is National Public Data and what kind of data was stolen?
National Public Data is owned by Jerico Pictures, Inc. and is headquartered in Coral Springs, Florida. It is a background checking service that scrapes personally identifiable information of individuals from non-public sources. This means many of the people who were affected by the breach did not knowingly provide any of their personal information to NDP.
In their breach disclosure, NDP stated that "information that was suspected of being breached contained name, email address, phone number, Social Security number, and mailing address(es)."
They also said they had "cooperated with law enforcement and governmental investigators and conducted a review of the potentially affected records and will try to notify you if there are further significant developments applicable to you."
NDP suggests monitoring all of your financial accounts for unauthorized access/use, contacting the three U.S. credit reporting agencies, Equifax, Experian, and TransUnion, to obtain a free credit report from each by calling 1.877.322.8228 or by logging onto www.annualcreditreport.com. See below for more suggestions about how to protect your data and identity.
Were you part of the data leak?
Cyber security firm Pentester has set up a tool to let you determine if your data was part of the breach. Go to npd.pentester.com, enter your name and birth year to see a list of breached accounts, including the last four digits of the leaked Social Security numbers, at no charge.
What was learned from the lawsuit filed against NDP
The breach First became public when a lawsuit was filed against NDP alleging negligence, unjust enrichment, and breaches of fiduciary duty and third-party beneficiary contract.
On July 24, 2024, Christopher Hofmann received a notification from his identity theft protection service provider notifying him that his personally identifiable information (PII) was compromised as a direct result of the “nationalpublicdata.com” breach, and that his PII had been found on the Dark Web.
The lawsuit alleges that on April 8, 2024, a criminal gang that goes by the name of USDoD posted a database entitled “National Public Data” on a Dark Web hacker forum called “Breached.” USDoD alleged to have the PII of approximately 2.9 billion individuals and offered the database for purchase at a price of $3.5 million.
Hofmann v. Jerico Pictures, Inc., Docket No. 0:24-cv-61383 (S.D. Fla. Aug 01, 2024), Court Docket
Steps you can take to protect your identity and data
Identity theft plans available typically include some combination of account monitoring, alerts and restoration support. This means the plans can't stop criminals from targeting you and can only offer remediation assistance after the fact.
This breach highlights the fact that data breaches can arise despite the best intentions of individuals to protect and store their information safely. This information was scraped from nonpublic sources and stored without encryption or other safeguards.
"As the list of mega-breaches continues to grow, it is essential to consider investing in protective services that surpass the traditional practice of just monitoring changes in your credit report, particularly those that provide continuous surveillance of your bank accounts, your mailing address, and the dark web to detect any potential signs of identity theft at an early stage. Embracing the latest technology is crucial to safeguarding your identity" says ”Odysseas Papadimitriou, WalletHub CEO.
Here are some other suggestions from Wallethub for protecting your identity and data:
- Sign up for 24/7 credit monitoring
- Activate two-factor authentication
- Don’t respond to unsolicited requests for information
- Review credit card and bank accounts on a regular basis
- Sign or use your PIN to verify debit card purchases
- Place a free fraud alert on your credit file. A fraud alert tells creditors to contact you before they open any new accounts or change your existing accounts.
- Freeze your three primary credit reports. In this context, "freezing" means that you prohibit your credit reports from being accessed by most third parties. In return for a fee you get a PIN from the credit bureaus. This PIN acts as an additional key and it must be given in order for your credit reports to be accessed and used to open accounts or obtain loans
Bottom line
This breach demonstrates third-parties can collect, store and lose your data all without your participation or knowledge. You must be vigilant in monitoring your accounts and mind your surroundings when using credit cards or when providing personal information.
Consider using a credit card for expenses and not your debit card. All major credit cards offer blanket liability against unauthorized credit card purchases. If your debit card is appropriated, your bank account could be drained and you will potentially face a lengthy process to try and recover your money. And by using a credit card and not a debit card, you'll also have the opportunity to rack up rewards you can spend elsewhere.
Related Content
Get Kiplinger Today newsletter — free
Profit and prosper with the best of Kiplinger's advice on investing, taxes, retirement, personal finance and much more. Delivered daily. Enter your email in the box and click Sign Me Up.
Donna joined Kiplinger as a personal finance writer in 2023. She spent more than a decade as the contributing editor of J.K.Lasser's Your Income Tax Guide and edited state specific legal treatises at ALM Media. She has shared her expertise as a guest on Bloomberg, CNN, Fox, NPR, CNBC and many other media outlets around the nation.
-
Tax Efficiency Mastery for Financial Success
As you build your wealth, tax considerations are going to become more important in protecting your earnings and staying in good standing with tax authorities.
By Justin Donald Published
-
IRS Has No Set Plan to Replace Old Tech
IRS What could old IRS technology mean for your federal tax return and cybersecurity?
By Kate Schubel Published
-
In Family Philanthropy, Embracing Differences Can Pay Off
Different approaches to charitable giving among generations and individuals can actually enhance the family's giving. Here's how.
By Julia Chu Published
-
Apple's Launch Event 2024: Next-Generation Apple Watches and New AirPods 4
Apple’s September 9th big event is sure to surprise and amaze with the new iPhone 16, along with next-generation Apple Watch models and new AirPods 4.
By Kathryn Pomroy Published
-
Five Things About Annuities That May Surprise You
They're more varied, flexible and cost-effective than most people think, so don't let their complexity scare you off.
By Ken Nuss Published
-
This "Super" 529 Strategy Can Help You Jumpstart College Savings
This 529 strategy — superfunding a 529 — can help you maximize savings for a child or grandchild's education expenses.
By Erin Bendig Published
-
How to Deal With Inflation: Advice From a Financial Adviser
Higher prices are hitting everyone, but if you're especially hurting, here are some ways that could help you to cope.
By Kelsey M. Simasko, Esq. Published
-
How Long $750,000 in Savings Plus Social Security Will Last in Every State
How long $750,000 plus Social Security will last depends on when you retire and where you live.
By Donna LeValley Published
-
Mixed Jobs Report Keeps Fed on Track for Rate Cuts: What the Experts Are Saying
Jobs Report The Fed will cut rates this month. The only question is by how much.
By Dan Burrows Published
-
Is It Worth It to Upgrade to the New iPhone 16? Well, Yes.
Apple's iPhone 16 lineup will see significant changes across every model with dazzling new features and upgrades. Plus, Apple Intelligence will get a boost with the A18 Pro processor.
By Kathryn Pomroy Published