Stolen data was then put up for sale on the dark web
  • grte@lemmy.caEnglish
    176·
    9 months ago

    The personal data of 2.9 billion people, which includes full names, former and complete addresses going back 30 years, Social Security Numbers, and more, was stolen from National Public Data by a cybercriminal group that goes by the name USDoD. The complaint goes on to explain that the hackers then tried to sell this huge collection of personal data on the dark web to the tune of $3.5 million. It’s worth noting that due to the sheer number of people affected, this data likely comes from both the U.S. and other countries around the world.

    What makes the way National Public Data did this more concerning is that the firm scraped personally identifiable information (PII) of billions of people from non-public sources. As a result, many of the people who are now involved in the class action lawsuit did not provide their data to the company willingly.

    What exactly makes this company so different from the hacking group that breached them? Why should they be treated differently?

    • ricecake@sh.itjust.worksEnglish
      31·
      9 months ago

      I feel like that might be bad phrasing on the part of the article. They mainly aggregate public records, like legal document style public records, and they also scrapped data from not-(public record) data, which isn’t the same as (not-public) record data.

      I feel like I would want more details to be sure though, but scrapping usually refers to “generally available” data.

      • fmstrat@lemmy.nowsci.comOPEnglish
        4·
        9 months ago

        That all depends. If they’re pulling that private data for use in questionnaires, the terms may not allow them to save it, but they scrape it from the form.

        • ricecake@sh.itjust.worksEnglish
          2·
          9 months ago

          Yeah, it definitely might still be a bad data source,and it’s shady either way, just pointing out that “not public data” has a few meanings, and not all of them are synonymous with “private data”.

    • jaybone@lemmy.worldEnglish
      17·
      9 months ago

      Same with the big three credit reporting bureaus Equifax and whoever the fuck. Did anyone ever give them permission to horde all of their personal info? I don’t think so.

    • fmstrat@lemmy.nowsci.comOPEnglish
      3·
      9 months ago

      All depends on the terms of use from those that provide the data to them that they scraped from. I bet they never expected a customer to do it.