The National Public Data Breach Exposed 169.4 Million SSN Records

HEROIC analysts identified a major database exposure tied to National Public Data, a U.S.-based data broker, surfacing on September 3, 2024. The dataset contained 169,400,000 records belonging to American consumers. The exposed information included email addresses, phone numbers, dates of birth, full names, and critically, U.S. Social Security Numbers. This is among the largest known exposures of American personal identity data on record.

What makes this breach especially dangerous is the combination of identifiers involved. Social Security Numbers paired with full names, birthdates, and contact details gives attackers everything needed to impersonate victims, open fraudulent credit accounts, file false tax returns, or bypass identity verification systems at financial institutions. Unlike password-based breaches, this type of exposure cannot be resolved by changing a credential.

What Was Exposed

• Email Address
• Phone Number
• Birthday
• Social Security Numbers
• First Name
• Last Name

Why This Matters

Social Security Numbers are the foundation of financial identity in the United States. When they are paired with a person's name, date of birth, phone number, and email address, as in this breach, the resulting profile is essentially a complete identity kit. Criminals use this type of data for account takeover, synthetic identity fraud, credit application fraud, and targeted phishing. Because none of the leaked data can be changed (unlike a password), victims remain at elevated risk indefinitely.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a system's backend data store and extracts records in bulk. This can happen through SQL injection, exploitation of unpatched software vulnerabilities, misconfigured cloud storage, or compromised administrative credentials. Data brokers like National Public Data are particularly high-value targets because they aggregate information from many sources into a single, richly indexed database. A single successful intrusion yields records on tens or hundreds of millions of individuals at once.

Check If You Are Affected

HEROIC's free breach scanner searches across more than 400 billion records to tell you whether your personal information has appeared in known data exposures, including this one. If your data was part of the National Public Data breach, you deserve to know. Run a free check at heroic.com and take the first step toward protecting your identity.