Hackers may have your social security number—and that of every American

The hackers violated the security of National Public Data, in a cyberspace break-in that reportedly resulted in the theft of 300 million Social Security Numbers (SSN) and other personal information. The consequences could result in a massive escalation in identity theft and fraud, Teresa Murray, consumer watchdog director for the U.S. Public Information Research Group, told the Times.

“If this in fact is pretty much the whole dossier on all of us, it certainly is much more concerning” than prior breaches, Murray told the Times. “And if people weren’t taking precautions in the past, which they should have been doing, this should be a five-alarm wake-up call for them.”

National Public Data states in an email, “We are aware of certain third-party claims about consumer data and are investigating these issues.”

The email also says it has “purged the entire database, as a whole, of any and all entries, essentially opting everyone out.” This means it has deleted any “nonpublic personal information” about people, even though “We may be required to retain certain records to comply with legal obligations.”

The leak encompasses the sort of information that banks and other financial institutions require when setting up accounts or when an individual wants to change the password on a current account. The hackers appear to have focused on social security numbers instead of email addresses, driver’s licenses or passport photos.

But Murray says that even just accessing the SSN can result in “all kinds of things” occurring, including losing control of a bank account or investment portfolio. Combined with date of birth and mailing address, a scammer can use as SSN to set up a new account or tamper with an existing one.

“For somebody who’s really suave at it,” Murray said, “the possibilities are really endless.”

“You can cause all kinds of chaos, commit all kinds of crimes, steal all kinds of money.”

The hacking of personal information has been so preponderant in recent years that personal data is probably available somewhere in the dark web. About five million people anonymously visit the dark web every day – though many are just curious and not intent on committing a crime.

Anyone who suspects their personal data has been breached should put a freeze on their credit status at all three of the credit bureaus who offer this service for free: Experian, Equifax and TransUnion.

Protecting personal data from theft means using common sense and not being lazy about security. It is key to choose strong passwords and do not use the same one for every service. Two-factor authentication might be an annoyance but it is extremely effective in protecting your data. An authentication app is an even better option because phone numbers an also be wrested from your control.

Never click on a link or call a number in an email from someone you don’t know. Even if the company is familiar to you, remind yourself that asking you to do would be a violation of its security protocols.