Individual "SXUL" Steals 2.9 Billion Records from National Public Data

Individual "SXUL" Steals 2.9 Billion Records from National Public Data

The notorious cyber criminal operating under the moniker "SXUL" has reportedly stolen a massive 2.9 billion records from National Public Data, a Florida-based information broker specializing in background checks. This database, containing sensitive personal details like names, addresses, and social security numbers, was first discovered for sale online in April 2024 for $3.5 million. Experts at VX-Underground confirmed its authenticity and noted that the database may soon be leaked unless certain conditions are met. Notably, the data does not include individuals who have opted out of data sharing services, providing some relief to those privacy-conscious citizens. This incident marks another high-profile breach facilitated by USDoD, who acted as a broker and/or middleman for the initial posting of the compromised data by "SXUL."

Key Takeaways

• An individual known as "SXUL" allegedly stole 2.9 billion records from National Public Data, an information broker for background checks.
• The stolen database, valued at $3.5 million, includes sensitive personal information like SSNs and addresses.
• The database may be leaked unless certain conditions are met.
• The database excludes individuals who use data opt-out services.
• USDoD acted as a broker/middleman for the posting of the stolen data, but the credit for the compromise goes to "SXUL."

Analysis

The theft of 2.9 billion records from National Public Data by "SXUL" exposes significant vulnerabilities in data security, impacting individuals and businesses reliant on background checks. The potential leak of sensitive information could lead to widespread identity theft and fraud, damaging consumer trust in data protection measures. Companies like National Public Data face reputational harm and potential legal repercussions. The exclusion of opt-out individuals highlights the effectiveness of privacy measures, encouraging broader adoption. This breach underscores the need for enhanced cybersecurity and regulatory oversight to prevent future incidents.

Did You Know?

• SXUL: An individual cyber criminal known for high-profile data breaches. In this incident, SXUL was responsible for the theft of 2.9 billion records from National Public Data.
• USDoD: USDoD is a notorious cyber criminal group known for high-profile data breaches. They specialize in stealing large databases containing sensitive personal information and acted as a broker/middleman for the posting of the stolen data by SXUL.
• National Public Data: This is a Florida-based information broker that specializes in conducting background checks. They collect and maintain a vast database of personal information used for various verification and screening purposes. The breach of their systems by SXUL resulted in the theft of 2.9 billion records.
• Data Opt-Out Services: These are services that allow individuals to request that their personal information not be shared or used by data brokers and other entities. In the context of the breach, it is noted that the stolen database does not include data from individuals who have opted out, providing some level of protection for those who actively manage their privacy settings.