PDN-R05 / Case Study

Old data never dies.

In 2024 a company most Americans had never heard of lost a database containing Social Security numbers at national scale, then filed for bankruptcy and shut down. The data is still out there. This is how old records keep resurfacing.

The National Public Data breach

National Public Data was a Florida background-check broker that compiled files on people from public records and other sources, then sold lookups to employers, landlords, and investigators. In April 2024 a hacker posted a database for sale claiming billions of records taken from the company. Through the summer, versions of the data circulated and were eventually released outright: names, Social Security numbers, current and historical addresses, dates of birth, phone numbers.

The company confirmed the breach in August 2024. By October it had filed for bankruptcy under the lawsuits and liabilities, and by December its website showed a closure notice. The people in the database had never chosen to be its customers. Most had never heard its name until it lost their Social Security number.

The company is gone. The data is not. Nothing about a bankruptcy deletes a file that has already been copied.

Why breached data keeps working

Stolen data recirculates for years. Breach dumps get merged into combined collections and resold, repackaged along the way into criminal search tools. A password you used on a forum a decade ago gets tried against your bank today, a technique called credential stuffing that works precisely because people reuse passwords across years and accounts. Identity data ages even better than passwords: your Social Security number and date of birth are as useful to a fraudster in 2026 as they were the day they leaked.

This is the seventh thread of the exposure web, the one people most want to believe is gone. Deleting an account removes your access to it. What the company kept, and what anyone took from the company, persists.

What this means for you

You cannot recall the data, so the work is making it useless. Freeze your credit with all three bureaus, which is free and blocks the main use of a stolen Social Security number. Check your email addresses against a breach notification service to learn which of your old accounts have leaked. Retire reused passwords in favor of a password manager, and put two-factor authentication on anything that matters. Old data keeps knocking. The goal is a door it no longer opens.

Sources

Next Move

Find out what is already out there about you.

Open the How Findable Are You self-audit
Follow The Work

No list to join. The work just ships.

PDN keeps no mailing list, which is exactly how a privacy project should treat your inbox. New guides and Atlas entries land on this site first, dossiers too, and the podcast carries every announcement. A community space is planned once the audience earns it.