Data breach at National Public Data

National Public Data (NPD) has declared on its website that it has been the victim of a cyber-attack. The data leak was revealed by the publication on a forum by the USDoD group of data, allegedly corresponding to 2.9 billion records, while another actor, Fenice, shared in the summer, for free, the data of 2.7 billion records.

NPD has confirmed that one actor was trying to access its data since at least late 2023, while the first leaks would date back to April 2024, although leaks were also detected in the summer of 2024. NPD has confirmed that the stolen data corresponds to name, email address, phone number, social security number and postal address(es).

NPD has launched an investigation to clarify the facts, in addition to collaborating with law enforcement and government investigators, and additional security measures have been implemented.