Billions May Have Had Personal Information, Including Social Security Numbers, Leaked on the Dark Web in Massive Data Breach

Hide your kids, hide your wife, and hide your Social Security number!

On Wednesday, it was reported that a massive database containing 2.7 billion records has surfaced on a dark web forum. According to sources, the records were allegedly stolen from the National Public Data (NPD) database and include sensitive information such as names, mailing addresses, and Social Security numbers. While the leaked data is still unverified, the scale of the breach suggests that a majority of U.S. residents could have been affected.

The breach reportedly occurred back in April, according to a class-action lawsuit filed in Fort Lauderdale, Florida. The lawsuit claims that the hacking group USDoD obtained the records from NPD, an organization that provides information for employers and others conducting background checks. Initially, USDoD tried to sell the information for $3.5 million but later made it available for free on the criminal forum Breachforums.

Although the exact number of individuals impacted remains unclear, Cliff Steinhauer, director of information security and engagement at The National Cybersecurity Alliance, warned that there’s a high chance “everyone with a Social Security number was impacted.”

One of the plaintiffs, Christopher Hofmann, said he was notified last month by his identity theft protection service that his information had been leaked on the dark web. Hofmann has accused NPD of “negligence, unjust enrichment, and breaches of fiduciary duty and third-party beneficiary contract.” He is seeking financial compensation and is requesting that NPD be required to delete the personal information of affected individuals and encrypt its data going forward.

In light of the breach, security experts are advising individuals to freeze their credit files with the major credit bureaus—Experian, Equifax, and TransUnion. Doing so will prevent hackers from opening loans or credit cards in your name. Additionally, it’s crucial to stay vigilant against phishing attempts and other scams.