National Public Data, a Florida-based company that aggregates consumers’ data to provide background checks, confirmed that they experienced a data breach. On April 7, the cybercriminal USDoD posted 2.9 billion rows of data on Breachforums for $3.5 million. The leaked data includes real names, addresses, phone numbers, and SSNs of millions of living and deceased Americans. Additionally, it contains 70 million entries from a database of US criminal records and 137 million unique email addresses; however, there were no email
addresses in the files containing SSN records. Atlas Data Privacy Corporation found 272 million unique SSNs in the records, with an average consumer age of 70. Furthermore, there were two million records for individuals over 120 years old. The NJCCIC’s product, Identity Theft and Compromised PII, offers recommendations and resources.