Recently, an alarming data breach occurred, resulting in the exposure of nearly 2.7 billion records of personal information belonging to individuals in the United States. This breach has raised significant concerns about privacy and security. Here’s an overview of what happened, steps you can take to protect yourself, and what to do if you suspect your information has been compromised.

What Happened?

A massive data leak involving 2.7 billion records recently surfaced on a hacking forum, revealing sensitive information such as names, social security numbers, physical addresses, and potential aliases of individuals across the United States. The data is believed to have been scraped by a company known as National Public Data, which compiles personal information for use in background checks, obtaining criminal records, and other investigative purposes.

Initially, a threat actor named USDoD claimed to have stolen 2.9 billion records from National Public Data and attempted to sell the data for a staggering $3.5 million. Although the original data reportedly included records from the United States, the United Kingdom, and Canada, the most recent leak—shared by a different threat actor known as “Fenice”—primarily focuses on U.S. residents. This leak comprises two text files totaling 277GB, containing the personal information of millions of individuals, including those who are deceased.

Preventative Measures You Can Take

The scale of this breach is a reminder of the importance of proactive measures to safeguard your personal information. Here are some steps you can take to minimize the risk of identity theft and fraud:

1. Monitor Your Credit Reports:

Make a point to double check your credit reports from the leading credit bureaus: Experian, TransUnion, and Equifax. Federal law entitles you to a free copy of your credit report annually from each bureau. Reviewing your report helps you spot unfamiliar accounts or suspicious activity, allowing you to take swift action if necessary.

2. Place a Fraud Alert:

Consider placing a temporary fraud alert on your credit file. This alert notifies potential creditors that they should verify your identity before opening new accounts in your name. It’s free to set up and lasts for one year, with the option to renew.

3. Freeze Your Credit:

If you suspect your information has been compromised or if you notice unusual activity on your credit report, consider placing a credit freeze. A credit freeze limits access to your credit report, making it more difficult for identity thieves to create new accounts under your identity.

4. Be Cautious of Phishing Attempts:

Given that previous leaks associated with this data breach included email addresses and phone numbers, be vigilant against phishing emails and SMS scams. These scams often attempt to trick you into revealing additional personal information or clicking on malicious links.

5. File Your Taxes Early:

Identity thieves may use stolen Social Security numbers to file fraudulent tax returns and claim refunds. By filing your tax return early, you reduce the likelihood of someone else filing in your name.

What to Do if You Think Your Information Was Compromised

If you believe your personal information has been exposed in this or any other data breach, it’s crucial to act quickly. Here’s what you should do:

1. Place a Fraud Alert:

Immediately place a fraud alert on your credit file by contacting any of the three major credit bureaus. Once placed, the other two bureaus will be notified automatically.

2. Obtain Your Credit Report:

Obtain a copy of your credit report and carefully review it for any unfamiliar accounts or suspicious activity. If you find any, escalate the fraud alert to a credit freeze.

3. Report Identity Theft:

If you discover fraudulent activity, report it to the Federal Trade Commission (FTC) at IdentityTheft.gov. The FTC will guide you through the steps needed to address the issue.

4. File a Police Report:

Reach out to your local police department to file a report regarding the identity theft.

5. Notify the IRS:

If your Social Security number has been compromised, notify the Internal Revenue Service (IRS) by filing Form 14039, Identity Theft Affidavit. This will alert the IRS to monitor your tax account for suspicious activity.

6. Consider an Identity Protection PIN:

The IRS offers an Identity Protection PIN (IP PIN) that adds an extra layer of security when filing your taxes. Only you and the IRS know this PIN, making it harder for thieves to file fraudulent returns in your name.

Moving Forward

The exposure of personal information on such a large scale is a sobering reminder of the vulnerabilities in our digital age. By taking the steps outlined above, you can reduce the risk of identity theft and protect your financial well-being. Remember to stay vigilant and regularly monitor your credit and personal information for any signs of unauthorized activity.

If you have any questions, don’t hesitate to get in touch with the GreenLoop IT Solutions team.