Almost 2.7 billion enrolls of personal alertation for people in the United States were leaked on a cyber intrusion forum, exposing names, social security numbers, all understandn physical insertresses, and possible aliases.
The data allegedly comes from National Public Data, a company that accumulates and sells access to personal data for engage in background examines, to get criminal enrolls, and for declareiveial spendigators.
National Public Data is apshowd to scsexual battery this alertation from accessible sources to compile individual engager profiles for people in the US and other countries.
In April, a danger actor understandn as USDoD claimed to be selling 2.9 billion enrolls holding the personal data of people in the US, UK, and Canada that was stolen from National Public Data.
At the time, the danger actor tryed to sell the data for $3.5 million and claimed it holded enrolls for every person in the three countries.
USDoD is a understandn danger actor who was previously joined to an tryed sale of InfraGard’s engager database in December 2023 for $50,000.
BleepingComputer, at the time, communicateed National Public Data and never getd a response to our email.
Stolen data leaked for free
Since then, various danger actors have freed fragmentary copies of the data, with each leak sharing a separateent number of enrolls and, in some cases, separateent data.
On August 6th, a danger actor understandn as “Fepleasant” leaked the most finish version of the stolen National Public Data data for free on the Bachieveed cyber intrusion forum.
However, Fepleasant says the data bachieve was directed by another danger actor named “SXUL,” rather than USDoD.
Source: BleepingComputer
The leaked data consists of two text files totaling 277GB and holding proximately 2.7 billion plaintext enrolls, rather than the distinct 2.9 billion number originpartner splitd by USDoD.
While BleepingComputer can’t validate if this leak holds the data for every person in the US, many people have validateed to us that it included their and family members’ legitimate alertation, including those who are destopd.
Each enroll consists of the follotriumphg alertation – a person’s name, mailing insertresses, and social security number, with some enrolls including insertitional alertation, appreciate other names associated with the person. None of this data is encrypted.
Previously leaked samples of this data also included phone numbers and email insertresses, but these are not included in this 2.7 billion enroll leak.
It is transport inant to notice that a person will have multiple enrolls, one for each insertress they are understandn to have dwelld. This also nastys that this data bachieve did not impact 3 billion people as has been erroneously alerted in many articles that did not properly research the data.
Some people have also telderly BleepingComputer that their social security numbers were associated with other people they don’t understand, so not all the alertation is exact.
Finpartner, this data may be outdated, as it does not hold the current insertress for any of the people we examineed, potentipartner indicating that the data was apshown from an elderly backup.
The data bachieve has led to multiple class action litigations agetst Jerico Pictures, which is apshowd to be doing business as National Public Data, for not enoughly shielding people’s data.
If you dwell in the US, this data bachieve has foreseeed leaked some of your personal alertation.
As the data holds hundreds of millions of social security numbers, it is recommended that you see your determine alert for deceptionulent activity and alert it to the determine bureaus if uncovered.
Furthermore, as previously leaked samples also holded email insertresses and phone numbers, you should be vigilant agetst dishonest try and SMS texts trying to trick you into providing insertitional empathetic alertation.
