National Public Data, a data broker operated by Jerico Pictures, Inc., confirmed on August 16, 2024 that an attacker had been attempting to breach its systems since December 2023. The company said data was stolen beginning in April 2024 and continuing for several months. Lawsuits alleged that the stolen cache contained as many as 2.9 billion records, including names, current and former addresses, Social Security numbers, dates of birth, and telephone numbers belonging to people in the United States, the United Kingdom, and Canada. The company said it was still determining how many individuals were actually affected and was cooperating with law enforcement.
The alleged theft became public after a hacker using the name “USDoD” reportedly offered the data on the dark web for $3.5 million. Three class-action suits and more than 14 additional federal complaints were filed in August 2024, accusing National Public Data of failing to protect highly sensitive information collected for employee background checks. Facing more than a dozen lawsuits and potential obligations to provide credit monitoring to hundreds of millions of people, Jerico Pictures filed for Chapter 11 bankruptcy on October 2, 2024. National Public Data shut down in December 2024, highlighting the lasting accountability and privacy risks created by large-scale data-brokerage systems.