National Public Data records for sale, flagged by @vxunderground — confirmed
@vxunderground described the USDoD sale listing on June 1, 2024. The company confirmed a breach in August.
Leaked on 01 June 2024

On June 1, 2024, @vxunderground posted that a threat actor called USDoD had listed a “National Public Data” database for sale on April 8, 2024, claiming 2.9 billion records on US citizens.
Troy Hunt analyzed the data on Aug 13, 2024 and found 134 million unique email addresses in one set of files. Infosecurity Magazine reported on Aug 16 that the Florida-based background check company confirmed a breach that took place in April 2024.
Confirmed breach. The 2.9 billion figure is the seller’s claim and counts records, not people.