Another day, another data breach.  Too true, but don’t be lulled into ignoring the recent NPD hacking.  You may not have dodged that bullet.

There’s a good chance your social security number is now on the Dark Web.

Still not worried.  You’ve never even heard of NPD before.  Correct, but irrelevant.  The point is that NPD was well acquainted with you and your personal details.

NPD, or National Public Data, is a data aggregator that provides background checks to businesses, including many financial institutions.  In that self-determined role, it gathered phone numbers, emails, addresses, SSNs, names of relatives, and other data on many millions of individuals.

NPD was great at gathering data; it was far less diligent at protecting that data.  NPD allowed hackers to access over 2.9 billion records.  Better still, it failed to disclose those data breach(es) until forced to do so as the result of a lawsuit.  Four (possibly eight) months later.

National Public Data is just one of the many Achilles heels of the ecommerce universe.  Websites often partner/outsource/contract with firms like NPD.  Surprised?  You shouldn’t be.  Most sites have a disclaimer that requires your approval.  The visible excerpts of these disclaimers are pure marketing.  They proudly state that the website will not sell your information, blah, blah, blah.  In finer print, for those who choose to look, is language stating that the site may/will share data with third party partners/vendors/contractors.

Partners like NPD.

The fragility of the entire ecommerce system is in direct contrast to its public image as safe and secure.  Don’t believe me?  Just look at this list of data breaches impacting MA residents so far this year.  The report is over 150 pages long!

This MA report lists only the reported breaches.  Many other breaches go undetected.  And let’s not forget that some organizations are reluctant to report problems.  NPD only reported its data breach after it was sued.

So, waste no more time.  Check to see if you were impacted by NPD’s laughable security measures.  Follow this link to be sure.

Good luck.

Peter Dragone - Co-founder of Keurig.