Over 600,000 sensitive files exposed in a data services leak from a data broker.

Some companies generate revenue by collecting personal data, including criminal records, employment details, and addresses, and then providing background check services to other businesses and individuals. However, these companies often do not adequately protect the data they collect. Recently, the National Public Data made headlines for failing to secure 2.7 billion records of people whose data it collected. Now, another data aggregator has exposed the personal information of 600,000 Americans.

Sign up for my free newsletter to receive a $500 gift card for the holidays.

What information leaked?

According to Website Planet, the exposed database contained 644,869 PDF files, totaling 713.1 GB of sensitive data. The documents mainly consisted of background checks but also included court records, vehicle ownership details such as license plates and VINs, and property ownership reports. The background checks alone revealed highly sensitive personal data, including full names, home addresses, phone numbers, email addresses, employment details, information about family members, social media accounts, and criminal histories.

The database was publicly accessible without password protection or encryption, allowing anyone to download the files. The files were named in a way that exposed personal details, making sensitive information visible even without opening them.

What you need to know about the company

SL Data Services LLC, an information research provider, has a database that exposes over 600,000 records. The company, which operates a network of 16 websites, prioritizes convenience over basic data security. One of its websites, Propertyrec, advertises real estate ownership data and property records. However, SL Data Services offers a range of services beyond property records, including criminal background checks, DMV records, and birth and death records.

Despite Propertyrec's claims of affordability, with the option to search for documents for as low as $1, customer reviews reveal a different story. Several users have reported being unknowingly enrolled in subscription services, leading to recurring charges instead of the advertised one-time fees. This raises concerns about the company's ethics and transparency.

How could the leak affect people?

The exposure of sensitive personal information in this breach is a significant issue for those affected. The database contains comprehensive data about them, making it a valuable prize for cybercriminals. This type of leak can result in a range of negative consequences.

Attackers could use leaked data to run phishing scams, social engineering tricks, and even impersonate someone to apply for loans, credit cards, or other services in their name.

Most individuals whose personal information was leaked may not become aware of it unless they utilize a service to remove their data. Many of them might not have realized they were being background-checked initially. For those with criminal records, such leaks could result in significant reputational harm or discrimination, even if the information is outdated or inaccurate.

We attempted to contact SL Data Services/Propertyrec for a comment, but did not receive a response before our deadline.

7 ways to protect yourself from data leaks

One of the best ways to protect yourself from scammers who cross-reference data from breaches with other information they find on the dark web is to use a data removal service. These services actively scan and remove your personal information from hundreds of websites. While no service can guarantee to completely erase your data from the internet, using a data removal service is a crucial step in safeguarding your privacy. If you're interested in learning more about the top data removal services, check out my recommendations here.

Beware of mailbox communications: Be cautious of unexpected communications sent through your mailbox, as bad actors may use your exposed address to try and scam you. They may impersonate trustworthy companies or individuals and send fake urgent letters about issues such as missed deliveries, account suspensions, or security alerts. Always verify any claims before taking any action.

Be wary of phishing attempts and ensure you have robust antivirus software: The exposed data may result in phishing attempts through email, phone calls, or messages from unknown sources. Be vigilant for any demands for personal information, especially if they appear urgent or request you to click on suspicious links. Always verify the authenticity of any request before responding.

To safeguard your devices from malicious links, ensure you have strong antivirus software installed. This protection not only guards against malware but also alerts you to phishing emails and ransomware scams, keeping your personal information and digital assets secure. For the best antivirus protection in 2024, check out my top picks for Windows, Mac, Android, and iOS devices.

Regularly review your financial accounts to monitor for unauthorized transactions and report them promptly to prevent further damage.

Keep your online accounts safe by using strong, unique passwords and a password manager to securely store them.

Implement 2FA on all accounts that offer it to prevent unauthorized access.

Ensure your software is up-to-date to safeguard against known vulnerabilities.

Kurt’s key takeaway

The negligence of companies in protecting personal data is alarming, as evidenced by recent breaches that exposed the sensitive information of 600,000 Americans. With unprotected databases containing valuable information such as criminal records and addresses, cybercriminals have a wealth of data to exploit. It is crucial to take proactive steps to safeguard your privacy and demand better security practices from data aggregators.

Should companies face harsher consequences for not safeguarding personal information? Share your thoughts by emailing us at Cyberguy.com/Contact.

To receive my tech tips and security alerts, sign up for my free CyberGuy Report Newsletter at Cyberguy.com/Newsletter.

Follow Kurt on his social channels:

Answers to the most asked CyberGuy questions:

New from Kurt:

Copyright 2024 CyberGuy.com. All rights reserved.