By now, you may have heard about a large-scale data breach that has put the Social Security numbers and other sensitive information of numerous Americans at risk, potentially in the hands of hackers.

The stolen data consists of 2.9 billion records that include names, addresses, Social Security numbers, and information about relatives spanning at least thirty years, as reported by law firm Schubert, Jonckheer & Kolbe.

This San Francisco-based firm has initiated a class-action lawsuit against National Public Data, a company that compiles data for background checks. The lawsuit claims that the company failed to adequately protect this sensitive information, which led to its theft and subsequent listing for sale on the dark web.

Because of this breach, individuals “now face years of constant scrutiny of their financial and personal data, monitoring requirements, and loss of rights,” according to the complaint filed in U.S. District Court in Fort Lauderdale, Florida, and initially reported by Bloomberg Law.

How Did This Large Data Breach Occur?

The lawsuit indicates that a cybercriminal group named USDoD gained access to the National Public Data network (also referred to as Jerico Pictures, Inc., located in Coral Springs, Florida) and acquired unencrypted personal data. Around April 8, 2024, this group released a database on the dark web, claiming it contained details of approximately 2.9 billion people and offering it for sale for $3.5 million.

The plaintiff, Christopher Hofmann from Fremont, California, received a notification from an identity theft protection service indicating that his data had been compromised and found on the dark web due to this breach.

Is Freezing My Credit Necessary?

If you are worried about your credit security due to the potential theft of your personal information, placing a freeze on your credit reports is a protective measure against unauthorized borrowing.

This credit freeze, sometimes referred to as a security freeze, stops creditors from accessing your credit report, as stated by the U.S. General Services Administration.

“Everyone should think about freezing their credit report with each major credit bureau, as it is free and prevents unauthorized individuals from opening credit accounts or taking loans in your name,” advised Odysseas Papadimitriou, CEO of the personal finance site WalletHub, during an interview with YSL News.

If your Social Security number is not part of the National Public Data breach, “it’s likely it was included in a prior breach or will be soon,” Papadimitriou warned. “Unfortunately, our personal information is exposed. Responsible consumers must assure they are challenging targets for fraudsters who have access to stolen data.”

Initiating a credit freeze is a good initial step, he said. Keep in mind that if you need to create new accounts—like for buying a house or car or obtaining a new credit card—you will need to temporarily lift the freeze.

“It’s straightforward to remove the freeze when you want to apply for a financial product,” Papadimitriou mentioned.

Steps to Freeze Your Credit

Freezing your credit report is cost-free. However, you need to contact all three primary credit reporting agencies:

• Equifax
• Experian
• TransUnion

You can submit your request via online, phone, or mail options. According to the General Services Administration, agencies must implement your credit freeze request within one day if made online or over the phone. Mail requests should be processed within three business days. Similarly, if you want to lift the freeze, it must be done within an hour if requested online or by phone, while mail requests have a three-business-day timeframe.

Additional Measures to Safeguard Your Identity Following Breaches

• • Strengthen Your Passwords: Enhance your passwords by using unique, complex combinations of letters, numbers, and symbols,” advises Adrianus Warmenhoven, a cybersecurity expert at NordVPN, in a breach advisory sent to YSL News. “Always use different passwords for different accounts.” He suggests utilizing a reliable password manager to safely store these stronger passwords.
  • Enable Two-Factor Authentication: Always opt for two-factor authentication, whereby you confirm your identity through a text, email, or push notification when accessing your account. This can “provide an extra layer of security to your accounts,” Warmenhoven explains.
  • Regularly Review Statements and Credit Reports: “In the aftermath of this breach, it’s crucial to remain alert by frequently checking your credit reports, bank statements, and online accounts for any suspicious activities,” he emphasized.
  • Be Cautious of Scams: Be prepared for an influx of fraudulent solicitations via email, phone, and text messages—known as “phishing”. If you see an increase in unsolicited calls and emails requesting your personal information, keep this in mind: Only reply if you have explicitly asked to be contacted,” said Papadimitriou.
  • Think about identity protection and beyond: With security breaches becoming more frequent, you might want to consider advanced identity protection services, according to Papadimitriou. For instance, WalletHub Premium offers identity protection and monitoring starting at $6.49 per month; its Premium+ plan ($11.99 monthly) includes monitoring for your bank accounts.

He noted that free identity protection options typically offer limited security. “Implementing measures such as freezing your credit, regularly updating your passwords, and enrolling in bank account and credit monitoring systems can significantly hinder criminals from misusing stolen information,” Papadimitriou explained.

“As we all start to accept that our personal data is vulnerable, we must also recognize that experiencing identity theft is likely at some stage,” he emphasized. “Thus, having identity theft insurance and restoration services is as crucial today as having car insurance was back in the day.”