There are companies whose entire business models are built around collecting personal data, including criminal records, employment details, addresses, and more. They use this data to provide background check services to other companies and individuals. However, while they profit from this information, they often fail to adequately protect it. Earlier this year, National Public Data made headlines: Failed to protect 2.7 billion records of collected data. Now, on a smaller scale, another data collector has exposed the personal information of 600,000 Americans.
Ends Tomorrow: We're giving away a $500 gift card for the holidays.
Please enter by sign up For my free newsletter.
hacker illustration (Kurt “Cyber Guy” Knutson)
What kind of information was leaked?
According to reports Website Planetthe published database contained 644,869 PDF files, containing a total of 713.1 GB of sensitive data. These documents primarily consisted of background checks, but also included court records, vehicle ownership details such as license plates and VINs, and property ownership reports. Background checks alone revealed highly sensitive personal data, including names, home addresses, phone numbers, email addresses, employment details, information about family members, social media accounts, and criminal records.
The worst part is that the database remains exposed without password protection or encryption, allowing anyone to retrieve it. Anyone with the link can view and download the file. In addition, the files were named in a way that revealed personal information, using formats such as “First_Middle_Last_State.PDF.” This allows you to view sensitive information without having to open the file.
hacker illustration (Kurt “Cyber Guy” Knutson)
Here's what ruthless hackers stole from 110 million AT&T customers
What you need to know about the company
The database in which more than 600,000 records were leaked belongs to SL Data Services LLC, an information research provider that appears to prioritize convenience over basic data security. The company operates a vast network of about 16 websites, including Propertyrec, which promotes real estate ownership data and real estate records. But SL Data Services' business goes far beyond property records, offering services such as criminal background checks, DMV records, and even birth and death records.
Although Propertyrec advertises its affordability by claiming that users can search for documents for as little as $1, customer reviews paint a different picture. Many users report that they are unknowingly signed up for subscription services, resulting in recurring charges instead of the one-time charges promised. This predatory business practice raises further questions about the company's ethics and transparency.
Woman working on two computers (Kurt “Cyber Guy” Knutson)
Beware of encrypted PDFs as the latest method to deliver malware
How could a breach affect people?
The leakage of sensitive personal information in this breach is a major concern for everyone involved. The database has detailed data about them and it is basically a jackpot for cyber criminals. This type of leak can have a variety of dangerous consequences.
First, attackers can use this information to perform phishing and social engineering tricks. If they know details like your job, family, or even criminal history, they can send very convincing messages to trick you into sharing even more sensitive details like financial information. Possibly. That's not all. Criminals can also use this leaked data to impersonate someone and apply for loans, credit cards, and other services in that person's name.
But what's really interesting to me is that most people whose information has been compromised probably won't even know about it unless they use a service to delete their data. Many of them may not even have known they were undergoing a background check in the first place. For people with criminal records, this type of breach can cause significant reputational damage and lead to discrimination, even if the information is outdated or completely wrong.
SL Data Services/Propertyrec was contacted for comment but did not respond by deadline.
7 ways to protect yourself from data breaches
1) Delete your personal information from the internet. Although no service can promise to completely erase your data from the Internet, one of your best options is to use a data deletion service. They do the heavy lifting of actively scanning and removing personal information from hundreds of websites. This helps protect against fraudsters who cross-reference data from a breach with other information found on the dark web. Check out my recommended data deletion services here.
2) Be careful with mailbox communication. Once your address is exposed, malicious parties can try to scam you via physical email. They can impersonate trusted companies or people and send fake emergency letters about missed deliveries, account suspensions, security alerts, and more. Be skeptical of unexpected communications and review claims before taking action.
3) Beware of phishing scams and use strong antivirus software. Leaked data can lead to phishing attacks via email, phone calls, or messages from unknown sources. Be very careful about requests for personal information, especially if they appear to be urgent or if they ask you to click on a link that looks suspicious. Always check the validity of the request before responding.
To protect your device from malicious links, make sure you have strong antivirus protection. The best way to protect yourself from malicious links that can install malware and access your personal information is to install antivirus software on all your devices. This protection also warns you about phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best antivirus protection products of 2024 for Windows, Mac, Android, and iOS devices.
4) Monitor your account. Given the scope of this breach, it's important to start checking your bank accounts, credit card statements, and other financial accounts on a regular basis. To prevent further damage, be aware of fraudulent transactions and report them immediately to your bank or credit card company.
5) Use strong and unique passwords. Create complex passwords for each online account; password manager to track them safely.
6) Enable two-factor authentication (2FA): We implement this additional layer of security on all accounts that offer it to prevent unauthorized access.
7) Update your software regularly. Maintain your operating system, apps, and security tools Latest Protect against known vulnerabilities.
What to do if your bank account is hacked
Cart important points
It's surprising how many companies profit from collecting personal data, yet fail to adequately protect it. Recent breaches, including one that exposed sensitive information for 600,000 Americans, highlight this neglect. With unprotected databases containing everything from criminal records to addresses, cybercriminals have a treasure trove of information to exploit. This situation highlights the urgent need to take proactive steps to protect privacy and demand better security practices from these data aggregators.
Should there be stronger penalties for companies that fail to protect personal data? Email us at. Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report newsletter using the link below. Cyberguy.com/Newsletter.
Ask Kurt a question or let us know your story you'd like us to cover.
Follow Kurt on his social channels.
Answers to CyberGuy frequently asked questions:
New from cart:
Try out CyberGuy's new games, including crosswords, word searches, trivia, and more.
Enter CyberGuy's $500 Holiday Gift Card Sweepstakes
Best New Cyber Monday Sale in Cart
Copyright 2024 CyberGuy.com. Unauthorized reproduction is prohibited.
