Hackers Allegedly Jacked Every American’s Social Security Number… Here’s How to Protect Yourself

In what could be one of the most significant data breaches in history, hackers might have stolen the Social Security numbers of nearly every American. This alarming news surfaced about four months after a notorious hacking group claimed to have accessed an enormous amount of sensitive personal information from a major data broker. Recently, a member of this group reportedly released most of this information for free on an online marketplace that deals in stolen personal data. The implications are profound, as the breach could lead to a surge in identity theft, fraud, and other crimes. Now more than ever, it’s crucial to take proactive steps to protect yourself.

The Scope of the Breach: What We Know So Far

According to reports, the hacking group, known as USDoD, claimed in April to have stolen personal records of 2.9 billion people from National Public Data (NPD), a data broker that provides personal information to employers, private investigators, staffing agencies, and others conducting background checks. A member of the group, identified only as Felice, recently announced on a hacking forum that they were offering “the full NPD database.” This database reportedly contains about 2.7 billion records, each including full names, addresses, dates of birth, Social Security numbers, phone numbers, and other personal details.

National Public Data has yet to formally notify the public about the breach or respond to requests for comment. However, in response to inquiries, the company stated via email that they are “aware of certain third-party claims about consumer data and are investigating these issues.” They also mentioned that they have “purged the entire database of all entries,” essentially opting everyone out. Despite this, the damage may already be done, and the leaked information could be used for a range of malicious activities.

The Immediate Threat: Identity Theft and Fraud

The leaked data provides nearly everything a fraudster needs to assume someone’s identity. Banks, insurance companies, and service providers typically require this kind of information when creating new accounts or changing passwords on existing ones. With your name, Social Security number, date of birth, and mailing address, a determined criminal could create fake accounts in your name or gain access to your current accounts.

One slight relief is that email addresses and driver’s license or passport photos appear to be missing from the stolen data. However, this doesn’t significantly reduce the risk. Criminals could combine this information with data from previous breaches to assemble a more complete profile. The potential consequences are vast, including unauthorized access to bank accounts, credit cards, investment portfolios, and even email accounts.

Steps to Protect Yourself

In light of this breach, it’s crucial to take immediate action to protect your personal information. Here’s what you can do:

1. Place a Credit Freeze

One of the most effective steps you can take is to place a freeze on your credit files with the three major credit bureaus: Experian, Equifax, and TransUnion. A credit freeze prevents criminals from opening new accounts in your name, as it blocks lenders from accessing your credit report without your permission. The good news is that placing a credit freeze is free and relatively easy to do. However, you’ll need to remember to temporarily lift the freeze if you apply for new credit or a loan.

You can place a freeze online or by phone, but be cautious of unsolicited emails or texts claiming to be from a credit bureau. These could be phishing attempts designed to steal your personal information. Always initiate contact with the credit bureaus directly through their official websites or phone numbers.

2. Monitor Your Accounts and the Dark Web

Another important step is to monitor your financial accounts regularly for any suspicious activity. Many banks and financial institutions offer alerts that can notify you of large transactions or changes to your account. Additionally, consider signing up for a service that monitors your accounts and the dark web for signs of identity theft. These services typically come with a fee, but they can provide peace of mind by alerting you if your information is being misused.

Some companies, like Google and Experian, offer tools that can scan the dark web for your personal information. While these services aren’t specific to the National Public Data breach, they can still be valuable in detecting potential threats. For information specific to this breach, cybersecurity company Pentester offers a free tool that searches for your information in the breached NPD files. If your data is found, Pentester also provides links to the sites where you can freeze your credit reports.

3. Secure Your Existing Accounts

While freezing your credit can prevent new accounts from being opened in your name, it won’t protect your existing accounts. These are especially vulnerable if you haven’t set up online access to them. Oddly enough, accounts without online access are easier for thieves to exploit because they can create a login and password while pretending to be you.

To protect your accounts, make sure you have strong, unique passwords for each one. Password manager apps can help by generating and storing complex passwords for you, making it easier to manage multiple accounts securely. Additionally, it’s crucial to enable two-factor authentication (2FA) on all your accounts. This adds an extra layer of security by requiring a second form of verification, such as a text message or an authentication app, in addition to your password.

4. Protect Your Phone Number from Scammers

Phone number hijacking, also known as SIM swapping or port-out fraud, is another threat to be aware of. Scammers can take control of your phone number and use it to access your accounts, particularly if you use your phone for two-factor authentication. To protect yourself, consider taking the following steps:

• Create a passcode for your mobile account: AT&T allows you to set a passcode that restricts access to your account. This passcode adds an extra layer of security that scammers would need to bypass before making changes to your account.
• Enable account protection features: T-Mobile offers optional protection against unauthorized SIM swaps, while Verizon automatically blocks SIM swaps by shutting down both the new device and the existing one until the account holder confirms the change.

How Scammers Exploit Human Error

While hacked data is a significant threat, scammers often rely on social engineering to trick people into revealing sensitive information. They may pose as your bank, employer, or another trusted entity, using convincing tactics to lure you into providing your account details, logins, or passwords.

For example, you might receive an official-looking email or text message claiming to be from your bank, warning of suspicious activity on your account. The message may urge you to click on a link or call a phone number to resolve the issue. However, these links and numbers often lead to scammers who are eager to steal your information.

To protect yourself, never click on links or call phone numbers provided in unsolicited messages. Instead, if you receive a message that concerns you, look up the official phone number for the company (often found on the back of your debit or credit card) and call them directly to verify the information.

The Ongoing Battle Against Identity Theft

As data breaches become more frequent and sophisticated, protecting your personal information requires vigilance and proactive measures. The National Public Data breach serves as a stark reminder of the risks we face in an increasingly digital world. By taking steps like freezing your credit, securing your accounts, and staying alert to phishing attempts, you can reduce your vulnerability to identity theft and fraud.

However, even the best precautions can’t guarantee complete protection. Scammers are continually evolving their tactics, and the sheer volume of personal information available online makes everyone a potential target. The key is to remain informed and prepared, knowing that the battle against identity theft is an ongoing one.

Don’t Wait—Act Now

The potential theft of Social Security numbers from nearly every American is a sobering wake-up call. This breach is a reminder that we all need to take our digital security seriously. If you haven’t already, take the time now to freeze your credit, secure your accounts with strong passwords and two-factor authentication, and be on the lookout for phishing scams.

Remember, the information stolen in this breach could be used for years to come. Staying vigilant and proactive is the best way to protect yourself from the potential fallout. It’s better to be prepared than to become the next victim of identity theft.