National Public Data Breach Awareness
The 2024 National Public Data leak exposed 2.8 billion records, including Social Security numbers. Here is what to do — in 10 minutes.
What happened
In 2024 a data-broker called National Public Data was breached. The file contained roughly 2.8 billion records covering most Americans — typically name, address history, phone number, Social Security number, and often the same person 10 to 15 times across each address they have ever lived at.
The file is now circulating on the open internet. SafeCadence cannot take it down — once data is on that many hard drives, there is no "delete" button. What you can do is make the data useless to anyone trying to impersonate you.
What to do today (10 minutes)
1. Freeze your credit at all three bureaus
Freezing is free, takes about 3 minutes per bureau, and does not affect your credit score. It stops anyone from opening new accounts in your name.
- Equifax — https://www.equifax.com/personal/credit-report-services/credit-freeze/
- Experian — https://www.experian.com/freeze/center.html
- TransUnion — https://service.transunion.com/dss/orderStep1_form.page?sitePrefix=PC
When you actually need credit (mortgage, car loan), you log in and unfreeze for as long as you need — the freeze costs you nothing and inconveniences you only when you yourself want credit.
2. Create an IRS IP PIN
Stops anyone from filing a fraudulent tax return in your name. Free, takes 5 minutes:
→ https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin
3. Create a my Social Security account
If you don't claim the account yourself, an attacker with your SSN can. Free, takes 5 minutes:
→ https://www.ssa.gov/myaccount/
4. Opt out of prescreened credit offers
Stops the physical mail an identity thief uses to intercept pre-approved card applications. Free:
→ https://www.optoutprescreen.com
What to do this week
- Check all three credit reports free at https://www.annualcreditreport.com — look for accounts you didn't open
- Turn on MFA on your email (every password reset for every account flows through email)
- Turn on transaction alerts on every bank and credit-card account
- File the IRS Form 14039 (Identity Theft Affidavit) only if you've already seen fraud
Want to check if you're in the leak?
SafeCadence does not host an NPD lookup — we don't want to redistribute the raw breach data. A trustworthy free check is run by Pentester.com:
→ https://npd.pentester.com
Type your name, get back whether you appear in the file.
What about my children?
The NPD file contains records on minors too. Children are a high-value target because nobody checks their credit until they apply for student loans. Process for each child under 16:
- Freeze their credit at all three bureaus (each bureau has a "minor credit freeze" page — you'll need their SSN and birth certificate)
- Don't post their full name, school, and birthday together on social media
- When they turn 16, walk them through this checklist with their own accounts
What freezing your credit does NOT protect
- Existing fraud on accounts you already have (use transaction alerts)
- Medical-identity theft (check your "Explanation of Benefits" statements)
- Tax-refund fraud (the IRS IP PIN above is the fix)
- Phone-port / SIM-swap attacks (call your carrier and ask for "Port Out PIN")
- Social-engineering of your bank or utility (call them, add a verbal-passcode-required note)
Related tools
- SSN Exposure Safety Guide — the full step-by-step plan
- Identity Theft Risk Score — 15-question posture check
- Username Leak Checker — see if your email appears in other breaches
- Password Leak Checker — has any password you use been leaked
This page is educational, not legal or financial advice. For complex identity-theft situations, contact the FTC at 1-877-438-4338 or a qualified attorney.