Company behind massive Social Security breach is back online. It still has your data.

National Public Data — the online background check and fraud prevention service targeted by hackers in what became one of the biggest social security breaches ever — is back. It may still pose a security threat.

In 2024, the private company announced a malicious actor had gained access to its systems in a Dec. 2023 breach, leaking information for several months to the web's black market. It took National Public Data even longer to disclose details of the breach to the public, which exposed nearly three decades of Social Security records — it was estimated that the hackers accessed hundreds of millions of records. Data included Social Security numbers, full names, addresses, emails, and phone numbers, prompting many to freeze their credit and go on the defense against identity theft.

The site shut down last year following the scandal, but now it appears that National Public Data is back in the personal information game. PC Mag reports that the domain is once again active and running with a new, unnamed owner. The site, which is operating as a people search engine, appears to still store personal data pulled from publicly available sources, including federal databases.

At the bottom of the homepage, the new National Public Data links to a statement on the 2023 breach. "The security of our users’ data is the most important factor for us. That’s why we protect it by implementing robust encryption protocols, regularly updating our security systems, and complying with all relevant data protection regulations," the site's FAQ reads.

How to opt out of National Public Data's search

Like other people search engines, individuals must request their personal information not be displayed on the site. To do so, users have to fill out the company's Opt Out Form. Individuals will need to first find and copy the link to their personal data profile on the site itself.

Individuals can also use a personal data removal service to scrub their information from multiple sites at once or manually remove their information from search sites like Google.