Skip to main content

Digital Trends may earn a commission when you buy through links on our site. Why trust us?

Major data breach involved ‘only’ 1.3 million people

Information from a hacking group and a class action lawsuit document sourced by Bloomberg Law reported that a recent data breach of 2.9 billion personal records leaked sensitive information, such as Social Security numbers. But until now, National Public Data (NPD) had not officially confirmed the breach or the number of affected users.

In a new statement about the breach, NPD explained: “There appears to have been a data security incident that may have involved some of your personal information. The incident is believed to have involved a third-party bad actor that was trying to hack into data in late December 2023, with potential leaks of certain data in April 2024 and summer 2024.” Separately, in a notification about the breach on the Maine Attorney General’s website, it was revealed a total of 1.3 million people were affected.

If it turns out to be true that just 1.3 million people were affected by the breach, that’ll be relatively great news. The 2.9 billion number, after all, was at a scale that made it one of the worst data breaches in internet history.

So far, no official mention of any affected U.K. or Canadian victims has been made. However, NPD states that it is cooperating with law enforcement, reviewing the affected records, and will try to notify those affected if further significant developments apply to affected users.

The National Public Data strongly encourages you to take preventive measures to help prevent and detect fraudulent activity by closely monitoring your financial activity. NPD also recommends contacting the three U.S. credit reporting agencies (Equifax, Experian, and TransUnion) for free credit reports.

You can also place a fraud alert that tells creditors to contact you before anyone tries to change existing accounts or open new ones. For example, when you place a fraud alert with TransUnion, it must legally let Equifax and Experian know.

If you have never dealt with either credit agency, you’ll have an easier time placing a credit freeze or fraud alert with TransUnion than Equifax or Experian. We’ll have to wait and see if the number stays at 1.3 million.

Judy Sanhz
Judy Sanhz is a Digital Trends computing writer covering all computing news. Loves all operating systems and devices.
A massive data breach has left Intel scrambling for solutions
A render of an Intel Core HX chip.

A security breach in March robbed MSI of up to 1.5TB of sensitive data. However, MSI is not the only company impacted.

As a result of the breach, Intel is now investigating a major leak of Intel Boot Guard keys. The extent of the damage is still unclear, but the worst-case scenario is that the security feature is now useless on compromised devices -- and that's a pretty lengthy list.

Read more
Hackers stole $1.5 million using credit card data bought on the dark web
A credit card is passed from one person to another.

In what sounds like a movie script, over $1 million was stolen by a group that made use of thousands of credit cards posted for sale on the dark web. Some of the details of this complex cybercrime operation have come to light following an indictment by the U.S. Department of Justice.

In the United States v. Trevor Osagie, the defendant has pled guilty to conspiracy to commit credit card fraud from 2015 to 2018. Osagie worked with a network of thieves and managed to rack up over $1.5 million in damages.

Read more
Microsoft data breach exposed sensitive data of 65,000 companies
A depiction of a hacker breaking into a system via the use of code.

Microsoft servers have been subject to a breach that might have affected over 65,000 entities across 111 countries, according to the security research firm, SOCRadar.

SOCRadar claims that it shared with Microsoft its findings, which detailed that a misconfigured Azure Blob Storage was compromised and might have exposed approximately 2.4TB of privileged data, including names, phone numbers, email addresses, company names, and attached files containing proprietary company information, such as proof of concept documents, sales data, product orders, among other information.

Read more