In December 2023, the data broker National Public Data was hacked by a third-party actor called USDoD, leading to the theft of 2.7 to 2.9 billion records, including names, Social Security numbers, and phone numbers. National Public Data, which sells personal information gathered without consent from nonpublic sources, is facing a class-action lawsuit and an investigation by the House of Representatives. Those affected can check their data’s leak using free online tools and should monitor their financial accounts for unauthorized activity.

Self-Replicating Worm Hits 180+ Software Packages
At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that steals credentials from developers and