Was Your Social Security Number One of the Millions Just Leaked? Here's How To Find Out and How To Protect Yourself
10:58 Share

One of the most stressful periods of my life was when I was in credit card debt. I got to a point where I just knew that I had to get it under control for my financial future and also for my mental health. We've all hit a point where we've realized it was time to make some serious money moves. So take control of your finances by using a time checking account with features like no maintenance fees,

fee-free overdraft up to $200 or getting paid up to two days early with direct deposit. Learn more at Chime.com/MNN. When you check out Chime, you'll see that you can overdraft up to $200 with no fees. If you're an OG listener, you know about my infamous $35 overdraft fee that I got from buying a $7 latte and how I am still very fired up about it. If I had Chime back then, that wouldn't even be a story. Make your fall finances a little greener by working toward your financial goals with Chime.

Open your account in just two minutes at Chime.com slash MNN. That's Chime.com slash MNN. Chime. Feels like progress. Banking services and debit card provided by the Bancorp Bank N.A. or Stride Bank N.A. Members FDIC. SpotMe eligibility requirements and overdraft limits apply. Boosts are available to eligible Chime members enrolled in SpotMe and are subject to monthly limits. Terms and conditions apply. Go to Chime.com slash disclosures for details.

Toyota has been building a legacy of excellence for years. From developing hybrid technology to upping the standards of safety and efficiency, Toyota is always innovating, always making progress. And with Toyota's superior lineup of SUVs in stock at your local Toyota dealer, you can experience the legacy for yourself. So check out an adventure-ready RAV4 designed to be the perfect mix of style, practicality, and go-anywhere attitude.

Or test drive a capable and affordable Corolla Cross with the style, space, and available tech to keep you cool and connected. And both RAV4 and Corolla Cross are available with all-wheel drive, giving you the freedom to roam. Quality, reliability, efficiency. That's the legacy of Toyota. Visit buyatoyota.com, the official website for deals, to find out more. Toyota, let's go places.

I'm Nicole Lappin, the only financial expert you don't need a dictionary to understand. It's time for some money rehab. As many as 272 million people just had their social security numbers leaked in a recent hack.

And I am one of them and you might be too. So today I'm going to explain how the heck this leak happened, how to know if your data is exposed and what to do to protect yourself. So first of all, this is one of the largest data breaches in history.

How did this happen? To put this number in context, 272 million Americans were potentially affected by this leak, and the US population is just over 345 million. So that means nearly four in five Americans were affected.

So again, how in the world could a disaster at this scale happen? Well, it all started with a company most of us have probably never heard of, Jericho Pictures Inc., which does business under the name National Public Data. This is a company that has been quietly collecting and scraping personal information on billions of people from various non-public sources. And no, you did not give your data to them. They just took it.

On April 8th of this year, a cybercriminal group called USDOD posted something on a dark web forum that shook the cybersecurity world. But it didn't make mainstream news until months later. In this forum, they claimed to have a database labeled National Public Data containing personal information on, wait for it, 2.9 billion people and was looking to sell it for $3.5 million.

So what kind of information was leaked? It was social security numbers, full names, addresses from decades ago, and even details about your relatives. The full 2.9 billion figure includes not just folks from the U.S. that are victims in this attack, but also people in the U.K. and in Canada.

One of the most crazy parts of this story is the fact that the company at the center of all of this, National Public Data, has reportedly done nothing, nothing to notify the victims. So as of now, there has been no warning, no heads up, nada, zero, zilch.

The reason we're talking about this now is because a California resident named Christopher Hoffman got a notification from a theft protection service that his personal information had been leaked. So after doing some digging, Hoffman discovered the national public data breach and filed a class action lawsuit against the company. In the lawsuit, he's accusing the company of negligence, unjust enrichment and a slew of other charges. He's not just asking for money here, though.

He is demanding that the national public data purge the exposed information, encrypt their data moving forward, and undergo regular cybersecurity assessments. If successful, this could set a new standard for how companies handle our data, or at the very least, how they should be held accountable when they drop the ball. Seems fairly reasonable to me, and honestly, like what they should have been doing all along.

Obviously, this is really creepy. But beyond the sketchiness of it all, it could have catastrophic repercussions on your finances if the hackers decide to use or sell your data. So when I first heard about this hack, I went to NPDbreach.com, a website that can tell you if your data was exposed in the hack.

To use the site, you put in your name, your zip code, and then it will prompt you to either put in your social security number or your phone number. And even though this site is highly recommended by a ton of news sources like the LA Times, I didn't put my social security number in the site because I'm still a little freaked out about putting information out into the internet ether right now. So I opted to put my phone number in, and that's how I learned that my information indeed was in the leak.

So this brings me to the big question, one you've probably been asking yourself this entire time: Is this a big deal? If my social security number is stolen, what does that really mean for me?

Well, with my social security number, these hackers could potentially open credit cards or apply for loans in my name, or they could sell my social security number to identity thieves who want access to using credit in my name. Or they could sell my social security number to identity thieves who want to get access to that credit using my name. And

Just to state the obvious, yes, it totally scared me. It made me feel very vulnerable to find this out. It felt like what I imagine it feels like to have somebody break into your home, but on the internet, you can't change the locks.

I knew, though, that it would start to make me feel better if I could take back some of this control and protect myself. So that's what I did. I froze my credit at the three big credit bureaus, Equifax, Experian, and TransUnion. You can do this over the phone or online. Either way, it's really easy to do. I put the websites and the phone numbers for the bureaus in the episode notes, so you can do this too if you want.

If you do freeze your credit, it's not the same thing as canceling a credit card. When you cancel a credit card, you have to get a whole new card and a credit card number. And if you had put any of your bills on auto pay using that credit card, you have to update those accounts.

Freezing your credit is totally different. When you freeze your credit, it essentially locks your credit report, preventing lenders, creditors or anyone else from accessing it. This means that even if somebody gets a hold of your personal information, they won't be able to open new accounts in your name because creditors won't approve any applications without being able to see your credit report.

And if you're about to make a big purchase like buying a house or a car, you can temporarily lift the freeze. This is called thawing your credit. And you can do this just as easily as freezing it. You simply contact the credit bureau where you place the freeze in the first place. You provide your pin or your password and specify how long you want the freeze lifted, whether it's for a few days or for a specific credit.

Once that period is over, your credit will automatically get refrozen, keeping your personal information safe. Fake credit cards and loans are the obvious crimes here, but there is more. These bad guys could also use my social security number to get a job, which sounds kind of crazy and unlikely until you start thinking about gig work, like driving for an Uber or freelancing on Fiverr, which is actually pretty easy to set up. And if somebody does do that with my information,

I could be the one subject to an IRS audit for unreported wages, and I am certainly not trying to hang out with the IRS here. So I did an employment data freeze on E-Verify. Identity thieves could also open utility accounts like a phone line or accounts for electricity or water in my name. So I did a utilities freeze with the National Consumer Telecom and Utilities Exchange, NCTUE.

They could also use my social security number to open bank accounts in my name, which could be used for God knows what, money laundering, fraud, all sorts of stuff. So I did a bank security freeze through Chex Systems. That's Chex with an X. I linked those websites in the show notes too. I also did a payday loan freeze, which I did through LifeLock. Data breaches are becoming an all too common occurrence. There's been a nearly 500% increase in cybercrime over the last year, but there is somewhat

lot of a silver lining here. Cases like this force companies to rethink how they handle our personal information. If this class action lawsuit does indeed succeed, it could mean more stringent regulations and better protections for all of us.

I know because this literally just happened to me how scary it feels to have your most important data stolen. But don't just be scared. Protect yourself. We can't just file this one away as another crazy thing that happened this year. We do have to take action to have our own back.

And I will say that while the NPD breach website that I've linked in the show notes is super helpful and is what helped me find out that my data was leaked here, if you don't see that your information was taken in the breach, I still wouldn't let my guard down. I'd still monitor my accounts more closely over the next few months. That means your bank accounts, your credit cards, but especially your credit reports. Again, this is the time to have your own back.

For today's tip, you can take straight to the bank. If you see that there's activity on your credit report that is not yours, you will definitely want to freeze your credit. And then you'll also need to report that activity as fraud so that your credit score is not affected. To play it super safe, you should check your credit at all three major credit bureaus. Sometimes fraudulent activity shows up on one, but not the others. So you'll want to have all three bases covered here.

Money Rehab is a production of Money News Network. I'm your host, Nicole Lappin. Money Rehab's executive producer is Morgan Levoy. Our researcher is Emily Holmes.

Do you need some money rehab? And let's be honest, we all do. So email us your money questions, moneyrehab at moneynewsnetwork.com to potentially have your questions answered on the show or even have a one-on-one intervention with me. And follow us on Instagram at Money News and TikTok at Money News Network for exclusive video content. And lastly, thank you. No, seriously, thank you. Thank you for listening and for investing in yourself, which is the most important investment you can make.

Toyota has been building a legacy of excellence for years. From developing hybrid technology to upping the standards of safety and efficiency, Toyota is always innovating, always making progress. And with Toyota's superior lineup of SUVs in stock at your local Toyota dealer, you can experience the legacy for yourself. So check out an adventure-ready RAV4 designed to be the perfect mix of style, practicality, and go-anywhere attitude.

Or test drive a capable and affordable Corolla Cross with the style, space, and available tech to keep you cool and connected. And both RAV4 and Corolla Cross are available with all-wheel drive, giving you the freedom to roam. Quality, reliability, efficiency. That's the legacy of Toyota. Visit buyatoyota.com, the official website for deals, to find out more. Toyota, let's go places.