Jerico Pictures Inc., operating as National Public Data, exposed nearly 3 billion personal records in an April data breach. On April 8, the cybercriminal group USDoD listed the “National Public Data” database for sale on a dark web forum, demanding $3.5 million. The breach, one of the largest ever, includes data like full names, Social Security numbers, and family information. Researchers from VX-underground confirmed the data is real and accurate. The breach does not include individuals who used data opt-out services.
A proposed class action lawsuit was filed in the US District Court for the Southern District of Florida. It highlights Jerico Pictures Inc.’s failure to protect sensitive information. The company gathered personal data by scraping non-public sources, often without the knowledge of those affected. The breach shows the urgent need for stronger data protection and the risks of weak security practices for companies handling vast amounts of personal information.