How Massachusetts residents can protect themselves after the Social Security data breach

How Massachusetts residents can protect themselves after the Social Security data breach

BOSTON – A new claims that hackers have stolen everyone's Social Security number. Although authorities have not yet confirmed the extent of the data theft, consumers may want to protect themselves.

The lawsuit, which alleges that billions of Social Security numbers were made public, was filed in Florida, according to a report by Bloomberg Law. The data, including addresses, was stolen in April from background check company National Public Data.

What happened?

“They just want to create chaos,” said retired FBI special agent Jennifer Coffindafer.

According to reports, the hacker group allegedly responsible calls itself USDoD.

“Of course people think it's the Department of Defense. They seem official, people may trust them in some way,” Coffindafer said.

The hackers were presumably financially motivated and demanded $3.5 million on the dark web. However, according to the tech site Bleeping Computer, the file was later distributed for free.

“These are addresses, these are names. When you have multiple pieces of a person's identity, you can do a lot more damage,” Coffindafer said.

How do you know if you are a victim?

“It really comes down to taking steps to protect your data,” Coffindafer said.

Coffindafer says consumers should:

  • Keep an eye on your bank accounts
  • Change passwords
  • Update your antivirus software
  • Beware of phishing scams

“Are you suddenly getting text messages saying the IRS is after you? You need to delete those types of messages immediately,” Coffindafer said.

What will the government do to protect the victims?

“The FBI has beefed up its cybersecurity units. They're trying to get into the dark web and do undercover investigations into who's committing these types of scams. Unfortunately, there are so many of them that it's very difficult,” says Coffindafer.

CBS reached out to National Public Data for comment but did not receive a response.