Technology

59598 readers

3551 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

517

2.9 billion hit in one of the largest data breaches ever — full names, addresses and SSNs exposed (www.tomsguide.com)

submitted 3 months ago by fmstrat@lemmy.nowsci.com to c/technology@lemmy.world

140 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] grte@lemmy.ca 176 points 3 months ago (3 children)

The personal data of 2.9 billion people, which includes full names, former and complete addresses going back 30 years, Social Security Numbers, and more, was stolen from National Public Data by a cybercriminal group that goes by the name USDoD. The complaint goes on to explain that the hackers then tried to sell this huge collection of personal data on the dark web to the tune of $3.5 million. It's worth noting that due to the sheer number of people affected, this data likely comes from both the U.S. and other countries around the world.

What makes the way National Public Data did this more concerning is that the firm scraped personally identifiable information (PII) of billions of people from non-public sources. As a result, many of the people who are now involved in the class action lawsuit did not provide their data to the company willingly.

What exactly makes this company so different from the hacking group that breached them? Why should they be treated differently?

[–] ricecake@sh.itjust.works 30 points 3 months ago (1 children)

I feel like that might be bad phrasing on the part of the article. They mainly aggregate public records, like legal document style public records, and they also scrapped data from not-(public record) data, which isn't the same as (not-public) record data.

I feel like I would want more details to be sure though, but scrapping usually refers to "generally available" data.

[–] fmstrat@lemmy.nowsci.com 4 points 3 months ago (1 children)

That all depends. If they're pulling that private data for use in questionnaires, the terms may not allow them to save it, but they scrape it from the form.

[–] ricecake@sh.itjust.works 2 points 3 months ago

Yeah, it definitely might still be a bad data source,and it's shady either way, just pointing out that "not public data" has a few meanings, and not all of them are synonymous with "private data".

[–] jaybone@lemmy.world 17 points 3 months ago

Same with the big three credit reporting bureaus Equifax and whoever the fuck. Did anyone ever give them permission to horde all of their personal info? I don’t think so.

[–] fmstrat@lemmy.nowsci.com 3 points 3 months ago

All depends on the terms of use from those that provide the data to them that they scraped from. I bet they never expected a customer to do it.