PrimeWay Blog

2.7 Billion Records Stolen: Secure Your SSN Now | PrimeWay Federal Credit Union

Written by Laurie Masera Garza | Aug 15, 2024 7:53:37 PM
Introduction 

In a staggering security breach, a hacking group called USDoD has claimed responsibility for a huge data theft. They say they stole 2.7 billion records of information from Americans. This theft affects nearly everyone in the U.S. It includes important details like Social Security numbers, home addresses and other information. The data was said to be taken from National Public Data (NPD). This company collects data for background checks from several sources, such as public records and court files.

The Scope of the Breach

The stolen data includes important details like Social Security numbers, home addresses and other information.

Social Security Numbers: This is possibly the most important information stolen. With Social Security numbers, hackers can easily take identities, create fake accounts and cause severe money problems for people.

Current and Past Addresses: This shows addresses from the last thirty years. It creates a clear history of where people have lived. This can help to shape a person's identity and follow their location over time.

Family Information: The stolen data includes information about family members. This means it has details about parents, siblings and even your children. It even has info on people who died nearly 20 years ago. Such detail can help with social engineering attacks. Hackers might act like a family member or use what they know to gain trust.

How Did This Happen?

The data leak took place in April 2024. Hackers got into the systems of National Public Data. NPD helps employers, private detectives and staffing agencies conduct background checks. It gathers information from many private sources. The hackers, who called themselves USDoD, stole this data without informing the people or getting their approval.

Unlike usual data leaks, where companies must inform people and officials, this case came from a group lawsuit in Fort Lauderdale, Florida. The lawsuit states that National Public Data did not protect the important information they were given. This act broke both their legal and moral duties. The main person in the case only learned about the leak when their identity theft help service told them that their details were at risk.

The Aftermath: Data for Sale

After the event, USDoD tried to sell all the stolen records for $3.5 million on a dark website that hackers often visit. This database not only has information about U.S. citizens, but it also contains details from people in the United Kingdom and Canada. This means that the event impacted people from several countries.

Although the hackers initially sought a large sum for the data, portions of the stolen information have since been leaked by various entities. Earlier leaks had mostly phone numbers and email addresses. However, the latest leak is much bigger. It includes Social Security numbers, home addresses and family details. This leak puts millions of people at risk for identity theft and other types of online crime.