The National Public Data data breach affected a significant number of users, exposing personal information that can be used for identity theft, phishing, and fraud. If you've ever had an account or relationship with National Public Data, it's worth checking whether your data was involved.
What Happened
National Public Data (NPD), a background-check and people-search data broker, suffered a breach where data was first offered for sale in April 2024 and a larger dataset was published for free on a hacking forum in August 2024. NPD confirmed the breach in a filing and subsequently filed for bankruptcy amid the fallout and lawsuits.
What Data Was Exposed
The leaked dataset reportedly contained close to 2.9 billion records including full names, addresses (current and past), Social Security numbers, and phone numbers, compiled from public records and other sources NPD used for its background-check services. Not every record represents a unique person, as some individuals appear multiple times.
Why This Still Matters
Even breaches from years ago remain a risk today. Stolen data is sold, traded, and reused indefinitely. Credentials from old breaches fuel credential stuffing attacks — automated attempts to reuse your email and password combination on other sites. If you reused a password anywhere, one old breach can compromise several current accounts.
How to Check If You Were Affected
Use our free breach checker below — enter your email and we'll scan it against known breach databases instantly, no signup required.
What to Do If You Were Affected
- Change any reused password immediately, starting with your most sensitive accounts.
- Enable two-factor authentication wherever it's offered.
- Monitor financial accounts closely if payment or banking data was involved.
- Watch for phishing — breach data is often used to craft convincing scam messages.
- Freeze your credit if your SSN or government ID number was exposed.
👉 Check your own exposure in 30 seconds → scan your email free.
Frequently Asked Questions
When did the National Public Data breach happen?
Data reportedly began circulating for sale in April 2024, with a larger portion of the stolen dataset published publicly on a hacking forum in August 2024. NPD confirmed the breach in a filing with Maine's Attorney General.
What data was stolen in the National Public Data breach?
The leaked dataset reportedly included names, current and former addresses, Social Security numbers, and phone numbers for a very large number of records, compiled from public and other background-check sources.
Is the National Public Data breach really that large?
Reports estimated up to 2.9 billion records, though this figure likely includes many duplicate entries per person (multiple addresses, aliases). Regardless, security researchers confirmed the presence of real, valid SSNs and personal data for millions of individuals.
How do I check if I was affected by the National Public Data breach?
Because NPD compiled data on people who never had a direct relationship with the company, checking is important even if you never used their service. Use the free checker at Scan My Shadow with your email, and consider a credit freeze given the presence of SSNs.
What happened to National Public Data after the breach?
NPD's parent company, Jerico Pictures Inc., filed for Chapter 11 bankruptcy in October 2024 following numerous class-action lawsuits and the reputational and financial fallout from the breach.