Credit unions can help protect members after the National Public Data breach by communicating practical identity-security steps quickly and clearly. The breach exposed sensitive personal information that criminals may use for identity theft, phishing, extortion or unauthorized financial activity. Members should consider freezing their credit with Equifax, Experian and TransUnion, placing a fraud alert when appropriate, and reviewing credit reports for unfamiliar accounts or errors. The article also recommends monitoring bank and credit card transactions, activating account alerts, using two-factor authentication and securing government-service accounts through official sites such as Login.gov, ID.me, IRS.gov and SSA.gov. Children and older family members should be included in these precautions because their information may also have been compromised. Identity theft protection services may provide additional monitoring and restoration assistance. Although no single measure can eliminate identity-theft risk, combining credit controls, account monitoring, phishing awareness and stronger authentication can create a more effective defense against misuse of stolen personal data.

Key Takeaways

Credit unions should communicate quickly after a major data breach because exposed Social Security numbers, contact details and other personal data can enable identity theft, phishing, extortion and unauthorized account activity.
A layered response provides stronger protection: members can freeze their credit, add fraud alerts, review credit reports, monitor financial accounts, enable two-factor authentication and secure important government-service accounts.
Children and older adults also require attention because compromised personal information can affect family members who may not routinely monitor credit files, financial transactions or identity-related activity.

Massive Data Breach Hits NPD

In August 2024, the hacker known as "USDoD" (previously known as NetSec) claimed responsibility for one of the largest data breaches in history, affecting nearly 2.9 billion individuals. The breach targeted National Public Data (NPD), a company that specializes in background checks and exposed highly sensitive personal information, including Social Security numbers, full names, addresses, dates of birth, and phone numbers. The stolen data was subsequently posted on a dark web bulletin board, which was made available for download to anyone with access to it.

Who is USDoD?

"USDoD" is believed to be an individual hacker operating from a country that does not prosecute cybercrimes against certain nations. Despite their provocative name, likely alluding to the U.S. Department of Defense, little is known about their actual location or identity. Their recent exploits have garnered significant attention due to the scale of the data they have compromised.

What Happens to the Stolen Data?

Once in possession of stolen data, groups and individuals like "USDoD" typically engage in a variety of activities to monetize the information. These activities include selling data on the dark web, committing identity theft, launching phishing attacks, and even engaging in extortion.

Steps Members Can Take to Protect Their Identity

Given the scale and severity of the NPD data breach, it is crucial to act swiftly to communicate and protect your members’ identity. Don’t forget young children and elderly family members could be exploited if their data was included in the data breach. 

Members, here’s what you can do:

Freeze Credit: Place a credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion. This will prevent identity thieves from opening new accounts in your name. Consider setting up online accounts with each bureau to prevent unauthorized access using your stolen data. If you need assistance, contact the bureaus using the numbers provided:
1. TransUnion: 800-916-8800 (https://www.transunion.com/credit-freeze)
2. Equifax: (888) 298-0045 (https://www.equifax.com/personal/credit-report-services/credit-freeze/)
3. Experian: 888-397-3742 (https://www.experian.com/freeze/center.html)
Enable Fraud Alert: If you used the pentester.com search and it reported that your information may have been included in the breach, it may also be a good idea to place a fraud alert on your credit file. You can use the same numbers above or go to each website for TransUnion, Equifax, and Experian to follow instructions for placing a fraud alert on your credit file.
Review Credit Reports: Obtain free copies of your credit reports from Equifax, Experian, and TransUnion via AnnualCreditReport.com. Review the reports for any inaccuracies or unfamiliar accounts and dispute any errors with the credit bureaus.
Be Vigilant Against Phishing: Be cautious when receiving unsolicited emails, texts, or phone calls asking for personal information. Cybercriminals often use phishing tactics to trick you into revealing sensitive details. Remember, phone numbers were included in this breach.
Monitor Financial Accounts: Regularly review your bank statements, credit card accounts, and other financial transactions for any unauthorized activity. Set up alerts with your bank and credit card companies to receive notifications of unusual charges.
Activate Two-Factor Authentication: Enable two-factor authentication (2FA) on your financial accounts and other sensitive online services. This adds an extra layer of security by requiring a second form of verification, such as a code sent to your phone, in addition to your password.
Set Up Online Accounts: Secure and monitor your government-related online accounts by setting up accounts on login.gov, id.me, irs.gov, and ssa.gov. These accounts provide secure access to important government services and help protect your personal information from unauthorized use.
Consider Identity Theft Protection Services: Identity theft protection services offer comprehensive monitoring and alerts for suspicious activity, as well as assistance in restoring your identity if it is compromised.

By taking these proactive measures, credit union members can significantly reduce the risk of identity theft in the aftermath of the NPD data breach. While no action can completely eliminate the risk, these steps can provide a strong defense against the misuse of members’ personal information.

Note: If your members suspect their data may have been compromised, the researchers at Pentester.Com have created a tool to help them check if their personal information was part of the NPD breach. While it's not guaranteed, this resource can guide members in determining whether further action is needed. Members can visit https://npd.pentester.com/search to see if their data was affected.

Be on the lookout for the remaining installments in this Behind the Digital Curtain Series: Exploring Modern Cyber Threats:

Generative AI: Innovation's Double-Edged Sword
Inside Phishing Kits: How Cyber Criminals Lure Victims

The information presented in this document is intended for informational purposes only and should not be construed as legal advice or a legal opinion and it may not reflect the most current legal developments. You should seek the advice of legal counsel of your choice before acting on any information provided in this document.

This article was first featured with CUInsight.

FAQs

What personal information was exposed in the National Public Data breach?

The National Public Data breach exposed highly sensitive personal information, including Social Security numbers, full names, addresses, dates of birth and phone numbers. Because the stolen data was reportedly posted on a dark web bulletin board, credit unions should help members understand that the information could support identity theft, phishing, extortion or attempts to open unauthorized accounts.

Why does the NPD breach increase identity theft and phishing risks for credit union members?

The NPD breach increases these risks because criminals can combine exposed identity and contact information to impersonate individuals or make fraudulent messages appear credible. Stolen Social Security numbers, birth dates, addresses and phone numbers may support identity theft, while contact details can help attackers target members through unsolicited emails, text messages or phone calls seeking additional sensitive information.

What should credit unions tell members to do first after the NPD breach?

Credit unions should promptly give members a clear set of protective actions rather than relying on a single safeguard. The article recommends freezing credit, considering a fraud alert, reviewing credit reports, watching financial transactions, enabling two-factor authentication and remaining alert to phishing. Communications should also remind members to consider children and older family members whose personal information may have been exposed.

How can a credit freeze help members affected by the NPD breach?

A credit freeze can help prevent identity thieves from opening new accounts in a member’s name. Members should place freezes with all three major credit bureaus—Equifax, Experian and TransUnion—and consider creating secure online accounts with each bureau. The article presents a credit freeze as one component of a broader response that also includes monitoring, authentication and phishing awareness.

Which financial accounts should members monitor after a large data breach?

Members should regularly review bank statements, credit card accounts and other financial transactions for unfamiliar or unauthorized activity. They can also activate alerts through their bank or credit card company to receive notice of unusual charges. For credit unions, encouraging consistent account monitoring can help members identify possible misuse sooner while reinforcing broader identity-theft and fraud-prevention practices.

Why should families check children and older adults after the NPD breach?

Families should include children and older adults because their personal information could have been exposed and exploited even if they do not actively monitor credit or financial accounts. The article specifically warns credit unions not to overlook these groups when communicating with members. Extending credit-report reviews, account protections and identity monitoring across the household can address risks that might otherwise go unnoticed.

How does two-factor authentication protect financial accounts after a data breach?

Two-factor authentication adds a second verification step beyond a password when someone accesses a financial account or another sensitive online service. The article recommends enabling 2FA as part of a layered identity-protection strategy. Even when personal information has been exposed, requiring an additional code or verification method can create another barrier against unauthorized account access.