National Public Data (NPD) Background Check Data Breach Class Action

National Public Data (NPD), a Florida-based background check and data brokerage company operated by Jericho Pictures, Inc., suffered a catastrophic data breach that became public in the summer of 2024. A hacking group known as USDoD claimed to have stolen approximately 2.9 billion records containing the personal information of hundreds of millions of Americans, Canadians, and British citizens. The stolen dataset — reportedly offered for sale on dark web forums for $3.5 million — included Social Security numbers, full names, current and past addresses spanning decades, and family member information. Alarmingly, most victims had no direct relationship with NPD, as the company aggregates personal data from public records and other sources without individuals' knowledge or consent.

Class action lawsuits were filed immediately after the breach was disclosed, alleging that NPD failed to implement adequate cybersecurity protections, collected and retained far more sensitive personal data than was necessary, and violated state consumer protection and data privacy laws. Because the stolen data includes Social Security numbers linked to addresses and relatives, plaintiffs allege heightened and lasting risks of identity theft, account takeover, tax fraud, and other financial crimes. NPD subsequently filed for bankruptcy in October 2024, complicating the litigation and raising questions about how victims can be compensated. The cases were consolidated before a Florida federal judge.