National Public Data Breach 3 Billion: Largest Data Broker Breach in History

National Public Data, a background check and data broker company, suffered a breach exposing approximately 2.9 billion records containing names, Social Security numbers, mailing addresses, email addresses, and phone numbers of individuals primarily in the US, UK, and Canada. The breach represented one of the largest data exposures in history, with the stolen database reportedly offered for sale at $3.5 million. The incident exposed the hidden data broker industry that compiles and sells personal information, often without individuals' knowledge or consent. Many affected individuals had never heard of National Public Data and were unaware the company held their information. The breach prompted calls for comprehensive data broker regulation and highlighted the risks of companies aggregating vast databases of sensitive personal information with inadequate security. National Public Data filed for bankruptcy following the breach, raising concerns about accountability and remediation when breached companies lack resources to assist affected individuals.

The ramifications of this incident extend beyond the immediate data exposure. Privacy regulators in multiple jurisdictions have opened investigations, and affected individuals are organizing collective action to demand accountability and meaningful remediation. The case highlights systemic weaknesses in how organizations handle personal data and the gap between corporate privacy promises and operational reality.

For impacted individuals, immediate action is critical. Filing a data subject access request forces the company to disclose exactly what data they hold about you, providing the foundation for deletion requests, regulatory complaints, and potential legal action. Below, we outline the specific data types at risk and the concrete steps you can take to protect yourself.