In April 2024, National Public Data (NPD), a data provider company that performs background checks and fraud prevention, experienced a major data breach that exposed nearly 2.7 billion records. This breach compromised highly sensitive personal information, including full names, Social Security numbers, addresses, and dates of birth. The breach was initially reported when a hacker group, known as USDoD, offered the data for sale at $3.5 million. However, in August 2024, the data was posted for free on a notorious dark web forum.
The leaked database is massive, containing over 277 GB of data, and has significant implications for those affected. Many individuals are unaware that National Public Data even had their information, as the company collects data without direct consent. This breach has led to a class-action lawsuit against Jerico Pictures, the parent company of National Public Data, for its failure to protect the personal information it held. The plaintiffs argue that the company did not adequately secure the data, putting millions at risk for identity theft and fraud.