Author: Staff Reporter

Columbia University has confirmed a significant data breach affecting nearly 869,000 individuals, exposing sensitive personal information, including Social Security numbers and academic records.

Columbia University has recently disclosed a major cyberattack that has compromised the personal, financial, and health-related information of approximately 869,000 individuals, including current and former students, employees, and applicants. Notifications to those affected began on August 7 and are ongoing.

The breach was discovered following a network outage in June, which Columbia attributed to unauthorized access by an external party. Investigators are currently assessing the full extent of the data theft, which reportedly includes about 460 gigabytes of sensitive information.

According to a breach notification filed with the Maine Attorney General’s office, the compromised data encompasses admissions, enrollment, and financial aid records, as well as certain employee information. However, Columbia has confirmed that patient records from the Columbia University Irving Medical Center were not affected by this breach.

The university has taken steps to report the incident to law enforcement and is collaborating with cybersecurity experts to address the situation. In response to the breach, Columbia has implemented new safeguards and enhanced protocols to prevent similar incidents in the future.

As part of its response, Columbia began mailing letters to affected individuals, offering two years of complimentary credit monitoring, fraud consultation, and identity theft restoration services. While the university has stated that there is currently no evidence of misuse of the stolen data, the risk of identity theft and fraud remains a significant concern, as criminals often exploit stolen information months after a breach.

Individuals affected by the breach are encouraged to take proactive measures to safeguard their personal information. Regularly checking credit reports through AnnualCreditReport.com can help identify unauthorized accounts or changes. Additionally, using personal data removal services can assist in scrubbing information from data brokers and people search sites, making it more difficult for criminals to exploit exposed details.

While no service can guarantee complete removal of personal data from the internet, utilizing a data removal service can be a prudent choice. These services actively monitor and systematically erase personal information from various websites, reducing the risk of identity theft.

In addition to these measures, placing a fraud alert on credit reports can make it more challenging for identity thieves to open accounts in an individual’s name. A credit freeze offers even stronger protection by blocking new credit applications altogether.

Creating long, complex passwords for each account is another essential step in protecting personal information. A password manager can assist in generating and securely storing these passwords. Furthermore, individuals should check if their email addresses have been exposed in past breaches, as many password managers include breach scanners to alert users of potential vulnerabilities.

Turning on two-factor authentication (2FA) wherever possible adds an extra layer of security to accounts, helping to protect them even if a password is compromised. It is also crucial to be vigilant against potential scams that may arise in the wake of the breach, as criminals often exploit fear to target victims with fraudulent emails or texts.

To protect against malicious links that could install malware, individuals should ensure they have strong antivirus software installed on all devices. This software can help detect phishing emails and ransomware scams, safeguarding personal information and digital assets.

Beyond the free credit monitoring services offered by Columbia, additional paid services can help track personal data across the dark web and provide extra safeguards. Identity theft protection companies can monitor sensitive information, such as Social Security numbers and email addresses, alerting users if their information is being sold or used fraudulently.

The breach at Columbia University underscores the vulnerability of even trusted institutions to cyberattacks. As the investigation continues and notifications are expected to roll out through the fall, individuals are advised to remain vigilant and proactive in protecting their personal information.

As discussions around data security continue, questions arise regarding what further measures universities and large institutions should implement to safeguard the personal data of those who place their trust in them.

Source: Original article

The notorious people search site National Public Data has relaunched under new ownership after a massive data breach that exposed the personal information of 3 billion individuals, raising significant privacy concerns.

National Public Data (NPD), a controversial people search site, has made its return to the internet despite a previous breach that affected the personal information of 3 billion individuals. The site’s relaunch has reignited concerns about privacy and data security.

More than a year ago, NPD gained notoriety for one of the largest data breaches in history, which led to the exposure of sensitive information belonging to billions. Following its disappearance from the web, the site has resurfaced under new ownership, specifically Perfect Privacy LLC. It is important to note that this company is not affiliated with the VPN service of the same name.

Despite the change in ownership, the business model of NPD remains unchanged. The site continues to allow users to search for personal data about friends, relatives, or even strangers using just a name. This functionality raises ongoing concerns about how such data can be misused, particularly in contexts like employment, housing, or credit decisions.

NPD claims that the information it provides comes from various sources, including public records, property ownership databases, social media, and government agencies. The company asserts that it verifies and filters this data to ensure accuracy and currency. However, users may still encounter inaccuracies, as a quick test search revealed a mix of outdated and correct information. The site appeared to struggle with hyphenated names but successfully retrieved accurate details in other instances.

Attempts to reach NPD for comment went unanswered before the deadline for this article.

For individuals who prefer not to have their information accessible on NPD’s platform, there is an option to request removal. However, each profile requires a separate request and confirmation email. After submitting a request, users should follow up in a few days to ensure their data has been removed. A helpful tip is to use an alias or disposable email address for these requests, making it easier to track confirmations and keep the main inbox uncluttered.

Removing personal information from NPD is just the beginning of the privacy battle. Numerous other people search sites may still display personal details, as many of these platforms draw from the same public databases. Consequently, addresses, phone numbers, and relatives’ names can continue to resurface online.

The return of NPD serves as a stark reminder of how quickly data can reappear on the internet. While a breach may fade from public attention, the exposed information often remains accessible. To safeguard privacy, individuals need a comprehensive strategy. Regularly searching for one’s name on various people search engines is advisable, as it helps identify new profiles before they proliferate.

In addition to NPD, other sites such as Whitepages, Spokeo, and Radaris often host similar data. Conducting periodic checks can help users stay informed about their online presence.

For those seeking a more efficient approach, data removal services can scan multiple databases simultaneously. These services request opt-outs on behalf of users and monitor for new listings. While no service can guarantee complete removal of personal data from the internet, employing a data removal service can be a prudent choice. Such services actively work to erase personal information from numerous websites, providing peace of mind and reducing the risk of scammers accessing data from breaches.

In addition to removing profiles, individuals should remain vigilant about monitoring their bank statements, credit reports, and online accounts. Exposed data can be exploited for phishing attempts, fraudulent loan applications, or identity theft. Staying alert to suspicious activity can provide early warnings of potential issues.

To further protect against malicious links that could install malware and compromise personal information, it is essential to have robust antivirus software installed on all devices. This software can also alert users to phishing emails and ransomware scams, safeguarding personal information and digital assets.

Setting up alerts for identity theft is another proactive measure. Many banks and credit monitoring services allow users to create alerts for suspicious activity. Additionally, individuals can establish free fraud alerts with credit bureaus, prompting lenders to take extra steps to verify identity before issuing new credit.

People search sites frequently pull records from government databases. Therefore, reviewing local county property, court, or voter registration records can be beneficial. Some jurisdictions permit requests for redactions or limitations on what is displayed online. Furthermore, tightening privacy settings on social media platforms can help limit what strangers can see, reducing the amount of public information available for collection.

The resurgence of National Public Data highlights the ongoing challenge of protecting personal information in an increasingly digital world. Even if individuals successfully remove their data from one site, numerous others may still retain their details. Consequently, safeguarding privacy requires more than a simple opt-out; it necessitates regular monitoring, credit freezes, and enhanced account vigilance to stay ahead of potential threats.

As the conversation around data privacy continues, individuals are left to ponder whether stronger laws should be enacted to prevent companies from collecting and selling personal data or if the responsibility lies solely with individuals to protect themselves.

Source: Original article