Do you know about the National Public Data class action lawsuit? If not, you might be impacted by one of the most significant data breaches ever without even realizing it.
Jerico Pictures Inc., operating under the name National Public Data, allegedly experienced a massive data breach earlier this year, exposing the personal information of 2.9 billion individuals.
The National Public Data class action lawsuit claims that a hacker group known as USDoD accessed and stole this data, putting it up for sale on the dark web.
This National Public Data breach highlights serious concerns about data security and privacy.
How did we get to the National Public Data class action lawsuit?
Christopher Hofmann, the named plaintiff in the National Public Data class action lawsuit, discovered the breach only when his identity theft protection service alerted him in July. Hofmann, a California resident, was notified that his personal information had been compromised and leaked on the dark web. The stolen data appeared on a dark web forum in April, with the hackers demanding $3.5 million for the database.
This timeline suggests that the breach was previously unknown to the public, raising questions about the company’s transparency and response to the incident.
The breach is especially alarming because many affected individuals may not be aware that their information was collected or compromised. National Public Data reportedly gathers data by scraping non-public sources without individuals’ consent, exposing sensitive details such as full names, Social Security numbers, and addresses. Even information about relatives, both living and deceased, was compromised. This breach, if confirmed, could rival the 2013 Yahoo breach, which compromised the data of 3 billion accounts.
Allegations against National Public Data
Hofmann’s lawsuit accuses National Public Data of negligence, unjust enrichment, and breaches of fiduciary duty and third-party beneficiary contract.
The plaintiffs allege that National Public Data failed to implement adequate security measures to protect the personal information it collected and stored. The company’s method of scraping non-public sources without consent further complicates the issue, as it means individuals did not knowingly provide their data to National Public Data.
The lack of consent adds another layer of concern to the National Public Data class action lawsuit.
Legal demands and proposed measures
Hofmann’s National Public Data class action lawsuit seeks not only monetary relief but also significant changes in how National Public Data handles and protects personal information. He has asked the court to require National Public Data to purge the personal information of all individuals affected by the breach. Additionally, the lawsuit demands that the company encrypt all data collected moving forward and implement several other security measures.
These measures include:
- Data segmentation: Ensuring that data is stored in separate segments to limit exposure in the event of a breach.
- Regular database scanning: Conducting regular scans of databases to detect and address vulnerabilities.
- Threat-management program: Implementing a comprehensive threat-management program to monitor and mitigate potential risks.
- Third-party assessments: Appointing a third-party assessor to conduct annual evaluations of National Public Data’s cybersecurity frameworks for the next 10 years.
Impact on affected individuals
The breach’s impact on the 2.9 billion affected individuals cannot be understated.
The exposed information includes highly sensitive data such as Social Security numbers, which can be used for identity theft and other malicious activities.
Current and past addresses, full names, and details about relatives can also be exploited for various fraudulent schemes. This widespread exposure has potentially left billions vulnerable to financial loss and privacy invasions.
Response from National Public Data
As of the filing of National Public Data class action lawsuit, the company had not provided any notice or warning to the affected individuals. The lack of communication is a critical point in the National Public Data class action lawsuit, as it suggests a failure to fulfill their duty to protect and inform their clients.
As the case unfolds, it will be crucial to monitor how National Public Data responds and what steps are taken to prevent such breaches in the future.
For now, those potentially impacted should stay vigilant and take steps to protect their personal information.
Featured image credit: vecstock/Freepik
