Cache of three billion background checks to be sold online by cybercriminals
The cybercriminal organization known as USDoD reportedly stole 2.9 billion records from Florida-based information broker National Public Data, which handles API queries for background check companies.
The database was first spotted online in April 2024 with a price tag of $3.5 million, and was later verified to be at least semi-real by experts at VX-Underground.
VX-Underground also believes that USDoD is planning to leak the nearly 300 GB database, which mainly contains data on US citizens, but may also contain data on people from other countries who have lived in the US unless they did one simple thing .
USDoD leaks again
The information in the database contained sensitive personal information, including full names, addresses and address history, social security numbers, and detailed information about family members, including the deceased.
For all the disappointing insights VX-Underground provided, they also offered a bit of good news: “The database does NOT contain information from individuals who use data opt-out services. Anyone using some kind of data opt-out service was not present.”
USDoD was one of two cybercriminal groups involved in the leak of the criminal records of millions of Americans earlier this year, and the theft of the 3GB TransUnion database in 2023.
Leading malware removal tool maker Malwarebytes claimed last month that the USDoD group wants to replace BreachForums, which was taken down by the FBI in May but has since somehow returned.
Through The register.