Skip to main content

Digital Trends may earn a commission when you buy through links on our site. Why trust us?

Major data breach involved ‘only’ 1.3 million people

Information from a hacking group and a class action lawsuit document sourced by Bloomberg Law reported that a recent data breach of 2.9 billion personal records leaked sensitive information, such as Social Security numbers. But until now, National Public Data (NPD) had not officially confirmed the breach or the number of affected users.

In a new statement about the breach, NPD explained: “There appears to have been a data security incident that may have involved some of your personal information. The incident is believed to have involved a third-party bad actor that was trying to hack into data in late December 2023, with potential leaks of certain data in April 2024 and summer 2024.” Separately, in a notification about the breach on the Maine Attorney General’s website, it was revealed a total of 1.3 million people were affected.

Recommended Videos

If it turns out to be true that just 1.3 million people were affected by the breach, that’ll be relatively great news. The 2.9 billion number, after all, was at a scale that made it one of the worst data breaches in internet history.

So far, no official mention of any affected U.K. or Canadian victims has been made. However, NPD states that it is cooperating with law enforcement, reviewing the affected records, and will try to notify those affected if further significant developments apply to affected users.

The National Public Data strongly encourages you to take preventive measures to help prevent and detect fraudulent activity by closely monitoring your financial activity. NPD also recommends contacting the three U.S. credit reporting agencies (Equifax, Experian, and TransUnion) for free credit reports.

You can also place a fraud alert that tells creditors to contact you before anyone tries to change existing accounts or open new ones. For example, when you place a fraud alert with TransUnion, it must legally let Equifax and Experian know.

If you have never dealt with either credit agency, you’ll have an easier time placing a credit freeze or fraud alert with TransUnion than Equifax or Experian. We’ll have to wait and see if the number stays at 1.3 million.

Judy Sanhz
Judy Sanhz is a Digital Trends computing writer covering all computing news. Loves all operating systems and devices.
Microsoft accidentally released 38TB of private data in a major leak
A large monitor displaying a security hacking breach warning.

It’s just been revealed that Microsoft researchers accidentally leaked 38TB of confidential information onto the company’s GitHub page, where potentially anyone could see it. Among the data trove was a backup of two former employees’ workstations, which contained keys, passwords, secrets, and more than 30,000 private Teams messages.

According to cloud security firm Wiz, the leak was published on Microsoft’s artificial intelligence (AI) GitHub repository and was accidentally included in a tranche of open-source training data. That means visitors were encouraged to download it, meaning it could have fallen into the wrong hands again and again.

Read more
This massive exploit lets hackers breach apps like Chrome, 1Password, and Telegram
A dark mystery hand typing on a laptop computer at night.

A massive security bug has just been discovered that affects WebP images used in untold numbers of websites and apps, and it could potentially let hackers break into your computer and extract data from it. In fact, Google has already seen it being actively exploited in the wild. Because of that, it’s essential that you patch your computer as soon as possible.

The discovery has been detailed by researcher Alex Ivanovs, who wrote about the bug in a blog post. Right now, it seems to affect almost all of the best web browsers, including Chrome, Firefox, Edge, and Brave. WebP images are used all over the web, meaning huge numbers of sites and apps could be affected.

Read more
Hackers targeted DMV to expose personal data of 9.5 million people
A dark mystery hand typing on a laptop computer at night.

A vulnerability in the MOVEit file transfer software has led to the infiltration of the personal records of millions of Americans across several states, according to Tech Radar.

The exploit has targeted the Department of Motor Vehicles (DMV) in Louisiana and Oregon. MOVEit software is used globally by several organizations, including many government agencies, and the vulnerability's code has been connected to several data breaches, the publication added.

Read more