Unprecedented Data Breach: The Largest Ever? | Neuways – Technologist

Jerico Pictures Inc., doing business as National Public Data, is facing a significant class action lawsuit following an unprecedented data breach that exposed the personal information of almost 3 billion individuals. The breach, which occurred in April 2024, is regarded as one of the largest and most impactful in history, raising serious concerns about data privacy and security practices.

When did we find out about the data breach?

The breach came to light on April 8 when a cybercriminal group known as USDoD announced on a dark web forum that they had obtained a massive database titled “National Public Data.” The group claimed that the database contained personal information on 2.9 billion individuals and attempted to sell it for $3.5 million.

The database included highly sensitive details such as full names, US-related Social Security numbers, current and past addresses dating back thirty years, and information about relatives, including deceased individuals.

How did the unprecedented data breach come about?

The National Public Data Service, operated by Jerico Pictures, aggregates this data by scraping personally identifiable information (PII) from non-public sources. According to the lawsuit filed in the US District Court for the Southern District of Florida, the plaintiffs and class members allege that this data was collected without their knowledge or consent, a violation of privacy and data protection laws.

They accuse National Public Data of failing to implement sufficient security measures to protect the massive amounts of PII in their possession, ultimately leading to this devastating breach.

What are the implications of the data breach?

The implications of this data breach are far-reaching and severe. The compromised information could be exploited by cybercriminals for various malicious activities, including identity theft, financial fraud, and phishing attacks. The scale of the breach, involving nearly 3 billion individuals, means that a significant portion of the global population could be at risk. Even deceased individuals’ data was not spared, raising concerns about the potential misuse of information related to estates and inheritances.

What was the data that had been leaked?

Researchers from VX-underground, who analysed the leaked data, confirmed its authenticity and noted the breadth of the compromised information. They also observed that while the database did not include individuals who had opted out of data collection services, it did contain detailed information about those who had not.

How does the data breach impact the company?

The class action lawsuit highlights the urgent need for companies handling vast amounts of personal data to prioritise cybersecurity and protect the privacy of individuals. If successful, the lawsuit could set a precedent for holding companies accountable for data breaches on such a massive scale. It also underscores the importance of regulatory oversight and stricter data protection laws to prevent similar incidents in the future.

What will happen now?

As the legal battle unfolds, Jerico Pictures Inc. has yet to issue a public response to the allegations. The outcome of this case could have significant ramifications for the company and the broader data aggregation industry, potentially leading to increased scrutiny and regulation of how personal information is collected, stored, and secured.

For now, the affected individuals are left to grapple with the potential consequences of their personal information being exposed to the dark web, with the hope that justice will be served and remedies provided to those impacted by this historic breach.