2.9 billion hit in one of the largest data breaches ever — full names, addresses and SSNs exposed
2.9 billion hit in one of the largest data breaches ever — full names, addresses and SSNs exposed
Stolen data was then put up for sale on the dark web
You're viewing a single thread.
The personal data of 2.9 billion people, which includes full names, former and complete addresses going back 30 years, Social Security Numbers, and more, was stolen from National Public Data by a cybercriminal group that goes by the name USDoD. The complaint goes on to explain that the hackers then tried to sell this huge collection of personal data on the dark web to the tune of $3.5 million. It's worth noting that due to the sheer number of people affected, this data likely comes from both the U.S. and other countries around the world.
What makes the way National Public Data did this more concerning is that the firm scraped personally identifiable information (PII) of billions of people from non-public sources. As a result, many of the people who are now involved in the class action lawsuit did not provide their data to the company willingly.
What exactly makes this company so different from the hacking group that breached them? Why should they be treated differently?
I feel like that might be bad phrasing on the part of the article. They mainly aggregate public records, like legal document style public records, and they also scrapped data from not-(public record) data, which isn't the same as (not-public) record data.
I feel like I would want more details to be sure though, but scrapping usually refers to "generally available" data.
That all depends. If they're pulling that private data for use in questionnaires, the terms may not allow them to save it, but they scrape it from the form.
Yeah, it definitely might still be a bad data source,and it's shady either way, just pointing out that "not public data" has a few meanings, and not all of them are synonymous with "private data".
Same with the big three credit reporting bureaus Equifax and whoever the fuck. Did anyone ever give them permission to horde all of their personal info? I don’t think so.
All depends on the terms of use from those that provide the data to them that they scraped from. I bet they never expected a customer to do it.