So, it looks like the NPD Group has outdone itself—by exposing a treasure trove of your personal information to the world. Yes, that’s right, your Social Security number might be out there, mingling with millions of others, all thanks to a recent data breach. But hey, who doesn’t love a little identity theft drama?

What Exactly Is National Public Data (NPD)? For those blissfully unaware (I wish I were part of this group) , National Public Data (NPD) is a massive database packed with all sorts of public info. Think of it as a digital scrapbook, where companies like NPD hoard data about your demographics, consumer habits, and sometimes, your Social Security number (have to love data brokers). Nice, right? Over 2.9 billion records were scooped up in this latest breach, which means you’re not alone in this privacy fiasco.

How to Check If Your SSN Was Breached (Because You Totally Have the Time) Now, onto the fun part: figuring out if your SSN is out there living its best life.  Two different websites have been stood up (I'm not endorsing them just sharing information) that you can enter part of your information and see what data was exposed:

• NPD.pentester.com — Only requires people to submit their first name, last name, state, and birth year.
• NPDBreach.com — People can search for their information using their full name and zip code, SSN, or phone number.

If your data was showing in there it's time to take additional action.  Start by grabbing your free credit reports from the three big credit bureaus—Equifax, Experian, and TransUnion—at AnnualCreditReport.com. Scroll through your reports like you're looking for a surprise party invitation—because surprise! Unfamiliar accounts or inquiries could mean your SSN has been thrown into the identity theft party.

If you aren't actively looking to apply for credit I'd go ahead and freeze my credit at the three credit bureaus as well.  I did the heavy lifting for you to make your life easier, because NPD clearly hates us.

• Equifax
• Experian
• TransUnion

Next, if you’re feeling particularly proactive (or paranoid, no judgment here), sign up for a credit monitoring service. These services will be your early warning system, alerting you if someone starts using your SSN like it’s their own.

The important thing to remember is TAKE ACTION. If you’ve found something fishy, it’s time to get serious. Placing a fraud alert or freezing your credit is like slamming the door shut before anyone else sneaks in. You should also file a report with the Federal Trade Commission (FTC) because, unfortunately, this is your life now.  

Another strategy is to sign up for a credit monitoring service.  Remember LifeLock and how he put his social security number on the side of a bus?  He had his identity stolen 13 times and he was using LifeLock so it's not foolproof, it's just another tool that needs to be monitored.

No number of lawsuits fixes this, so we need to tell our representatives we need a national data privacy strategy that has teeth to punish the people who take our data for granted.  Instead, these companies get slapped with a few million dollars in fines; while making an insane amount of money and we are the ones who suffer.  In Europe, GDPR can fine companies up to 4% of annual revenue for gross privacy violations.  I think we should go to 10% for a minimum of 3 years and start putting pressure on executives with jail time for gross negligence, but maybe I'm biased 🤷‍♂️.

It’s a tough spot to be in, and it’s totally normal to feel overwhelmed. But taking these steps can give you some peace of mind, even if it feels like a lot to handle. Remember, you’re not alone in this mess—millions of others are right there with you.