National Public Data Hack Exposes Millions: Safeguarding Your Identity
The recent data breach at National Public Data (NPD), a background check company, has potentially exposed the personal information of millions of individuals. The compromised data includes Social Security numbers, dates of birth, phone numbers, addresses, and even names of family members. The hacker claims to have obtained 2.7 billion records, potentially impacting anyone with a Social Security number, according to the National Cybersecurity Alliance.

The stolen data is already appearing on the dark web, increasing the risk of identity theft and other fraudulent activities. Fortunately, there are steps you can take to mitigate these risks:
Review Your Account Statements and Credit Reports
It’s crucial to remain vigilant. Regularly review your account statements and credit reports for any unusual activity. If you see anything suspicious, immediately contact the financial institution or company associated with the account. Contact their fraud department, explain the situation, and request they close the fraudulent account. If they refuse to close the account immediately, ask for a freeze on the account. If the account is closed, obtain a letter confirming (i) the account isn’t yours; (ii) you’re not liable for it; and (iii) it has been removed from your credit report. Keep a record of all communications, including the names of the people you speak with.
Purchase and Enroll in Identity Theft Protection Services
Consider subscribing to an identity theft protection service; IdentityForce and LifeLock are recognized as top-rated services. These services monitor the dark web for your information, help you file credit freezes, remove your data from databases, and provide other valuable assistance. You can find up-to-date reviews of these services from reputable sources like Tom’s Guide and CNET.
Obtain a Free Copy of Your Credit Report
You’re entitled to a free credit report from each of the three major credit reporting agencies (Experian, TransUnion, and Equifax) every 12 months. You can get these reports at www.annualcreditreport.com, by calling 877.322.8228, or by mailing a completed form to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348.
Place a Fraud Alert on Your Credit Report
You can place a fraud alert on your credit report at no charge by contacting any of the three credit reporting agencies. An initial fraud alert lasts for one year and requires businesses to verify your identity before granting new credit. If you’ve been a victim of identity theft and have filed a police report, consider an extended fraud alert, which lasts seven years. You can place a fraud alert online or by phone using the following contact information:
- Equifax: P.O. Box 105069, Atlanta, GA 30348 | 800.525.6285
- Experian: P.O. Box 9554, Allen, TX 75013 | 888.397.3742
- TransUnion: P.O. Box 2000, Chester, PA 19016 | 800.680.7289
Place a Security Freeze on Your Credit Report
In addition to a fraud alert, consider a security freeze. This prevents credit reporting agencies from releasing information from your report without your authorization. Placing a freeze may delay new loan or credit requests, as well as applications for mortgages, employment, and housing. You can lift a security freeze at no charge. You must request a freeze separately with each agency. You can do so online, by phone, or by mail, using the following contact information:
- Equifax: P.O. Box 105788, Atlanta, GA 30348 | 800.298.0045
- Experian: P.O. Box 9554, Allen, TX 75013 | 888.397.3742
- TransUnion: P.O. Box 160, Woodlyn, PA 19094 | 888.909.8872
To request a security freeze, you’ll need to provide your full name, Social Security number, date of birth, current and previous addresses (past five years), any relevant police reports. You’ll also need to include a copy of your government-issued ID and a recent utility bill or bank statement – ensure these are legible and show your name, current address, and the issue date. If you’re a victim of identity theft, submit a copy of the police or investigative report. Credit reporting agencies have processing deadlines depending on the method. They will also give you a PIN/Password you’ll need to lift or remove the freeze, so keep that in a secure place.
Report to Law Enforcement and the Federal Trade Commission (FTC)
File a police report with your local police department and keep a copy for your records. Also, consider reporting the identity theft to the FTC via www.ftc.gov/idtheft or by calling 877.ID.THEFT (877.438.4338). Reports filed with the FTC are added to their Identity Theft Data Clearinghouse, available to law enforcement agencies.
Notify the Internal Revenue Service (IRS)
File an IRS Form 14039, Identity Theft Affidavit. This form is designed for tax-related identity theft, but it may be helpful in your situation. More information is available online.
Correct Credit Reports, If Necessary
Contact each of the three credit bureaus in writing, detailing the information on your credit reports that resulted from identity theft. Request that they block that information, so it doesn’t appear on your credit report or affect your ability to obtain credit.
By taking these steps, you can significantly reduce your risk and protect your identity following this large-scale data breach.