Massive Data Breach Exposes Every American's Social Security Numbers

The breach, which includes Social Security numbers and other sensitive data, could power a raft of identity theft, one expert says.Photo byJenny Kane / Associated Press

In a major cybersecurity breach that has potentially compromised the identity of millions of Americans, the hacking group known as USDoD claims responsibility for leaking an enormous amount of personal information.

According to reports, they have released approximately 2.7 billion records, including sensitive details such as Social Security numbers, full names, and home addresses from National Public Data (NPD), a data broker specializing in background checks.

NPD, which provides crucial personal information for employment screenings and private investigations, is alleged to have obtained this data without proper consent. The breach, reportedly in April 2024, has led to a class action lawsuit accusing NPD of negligence and misconduct.

The lawsuit alleges that USDoD accessed and extracted the unencrypted personal information of billions of individuals, which has since been published and sold on the Dark Web. The leaked data was reportedly sold for $3.5 million.

It is essential to take proactive steps to determine if your personal information might be affected by this breach. Regularly monitor your credit reports for any signs of unauthorized or suspicious activities, such as new bank accounts or credit cards opened in your name.

If you encounter any irregularities or receive communication from debt collectors about unfamiliar accounts, contacting your financial institutions and local law enforcement is crucial.

Additionally, exercise caution with any unsolicited communication. Always initiate calls yourself rather than responding to unexpected requests for personal information, and avoid sharing your Social Security number unless you are certain of the recipient’s legitimacy.

Taking these precautions can help protect your identity and financial security in the wake of this significant data breach.