National Public Data Breach: SSNs Exposed and What to Do
Most people had never heard of National Public Data until it leaked their Social Security numbers. That is what makes data broker breaches so troubling.
National Public Data was a background check company. Its data was breached and offered for sale in 2024, and a huge file with names, addresses, phone numbers, dates of birth and Social Security numbers was later leaked. The company told Maine regulators 1.3 million people were affected, while researchers estimated far more. Its owner filed for bankruptcy in October 2024. If you live in the US, freeze your credit and get an IRS IP PIN.
Your email may already be in a known data breach. Find out in about 30 seconds.
Free · About 30 seconds · No sign-up · Email not stored
National Public Data (NPD) collected personal information to sell background checks. People did not sign up with it. Their details were gathered from other sources, which is why so many affected people had no idea the company existed.
What happened
According to The Record, NPD’s systems were compromised in a breach around late December 2023. Stolen data was sold on the dark web in April 2024 and again through the summer. A seller using the name USDoD posted a database claiming 2.9 billion records about US citizens. Security researcher Troy Hunt estimated it contained about 899 million unique Social Security numbers.
What data was involved
- Names
- Social Security numbers
- Phone numbers
- Home addresses
- Dates of birth
Some records were old or inaccurate, and some people appeared many times. But a name with a real SSN and date of birth is enough to cause serious harm.
Do not guess. See which breaches include your email and what leaked.
Free · About 30 seconds · No sign-up · Email not stored
How many people were affected
Figures vary. In a breach notice filed with Maine regulators, the company said 1.3 million people had information leaked. That number conflicts with the much larger scale researchers found in the leaked files. The safest assumption for US adults is that your SSN may have been in it.
The bankruptcy
Jerico Pictures, the company doing business as National Public Data, filed for Chapter 11 bankruptcy on October 2, 2024, The Record reported. That limits how much affected people can expect from lawsuits.
What to do now
1Freeze your credit
Place a free credit freeze at Equifax, Experian and TransUnion. This stops new accounts being opened in your name.
2Get an IRS IP PIN
Protect your tax return. See how to get an IRS IP PIN.
3Check your credit reports regularly
Free weekly reports are available at AnnualCreditReport.com.
4Beware of NPD-themed scams
Fake breach-check and settlement websites appeared after the news. Only use sites you know are genuine. See how to tell if a breach notice is real.
5Reduce people-search listings
NPD shows how data brokers can become breach risks. See what data brokers are and how to opt out.
Why some data was wrong
People who checked the leaked data often found old addresses, relatives listed under their name or wrong dates of birth. That is typical of broker data, which is assembled from many sources and rarely corrected. Wrong details can still be used in scams, because a fraudster only needs some of them to be right.
Does this affect people outside the US?
Some reports said the records also covered people in the UK and Canada. If you live outside the US, watch for scams that use your old addresses, and check your credit file with your local credit agencies.
Talk to older relatives
Many affected records belong to older people who may not follow breach news. Help them set up a credit freeze and warn them about calls from people claiming to fix the breach or offer compensation.
If your SSN was in it
Read what to do if your Social Security number was leaked, and if you see signs of misuse, follow what to do if your identity is stolen.
Sources
- The Record: National Public Data files for bankruptcy (October 2024) (timeline, 2.9 billion records claim, 899 million SSN estimate, 1.3 million Maine notice, data types, bankruptcy)
Frequently asked questions
What was National Public Data?
A background check company that collected personal information from other sources to sell checks.
Was my Social Security number in the NPD breach?
Many US adults’ SSNs may have been included. The safest approach is to freeze your credit.
How many people were affected?
The company told Maine regulators 1.3 million, but researchers estimated far more based on the leaked files.
Can I sue National Public Data?
Its owner filed for bankruptcy in October 2024, which limits recovery from lawsuits.
Is there a free NPD breach check?
Be careful. Fake check sites appeared after the breach. A credit freeze protects you whether or not you check.
See if your email has already leaked
- Checks your email against known data breaches
- Shows which sites leaked it, when, and what leaked
- We do not store the email you check
Change reused and leaked passwords
NordPass flags weak and reused passwords, and its Premium plan alerts you if your details appear in new breaches.
See NordPass →Affiliate link. We may earn a commission at no extra cost to you.
Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.