National Public Data DEVELOPED_BY Salvatore Verini Jr.
Sal created National Public Data as the flagship site of his data-broker business.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“the flagship site, National Public Data”
Organisation
organisation:national_public_data
Also: NPD
Data-broker service that collected and sold personal-data profiles and suffered the breach described in the episode.
Data-broker service that collected and sold personal-data profiles and suffered the breach described in the episode.
“the flagship site, National Public Data”
“Luan took everything, 2.9 billion lines of data”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DEVELOPED_BY | Salvatore Verini Jr. | Explicit | 177 |
| outgoing | USES | data scraping | Explicit | 177 |
| outgoing | CONTAINS | members.zip | Explicit | 177 |
| incoming | COMPROMISES | National Public Data breach | Explicit | 177 |
| incoming | COMPROMISES | USDoD | Explicit | 177 |
National Public Data DEVELOPED_BY Salvatore Verini Jr.
Sal created National Public Data as the flagship site of his data-broker business.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“the flagship site, National Public Data”
National Public Data USES data scraping
National Public Data collected personal information by scraping or acquiring data from brokers, marketing lists, social media, and apps.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“Sal either bought or scraped data from other data brokers, subscription and marketing lists, loyalty and rewards programs, social media, and other apps.”
National Public Data breach COMPROMISES National Public Data
The National Public Data breach compromised the data held by National Public Data.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“National Public Data leaked full names, birthdays, social security numbers, home addresses, past addresses, e-mail addresses, and phone numbers all in plain text.”
USDoD COMPROMISES National Public Data
USDoD gained access to National Public Data after reusing credentials that first enabled access to Records Check.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“Sal reused passwords, which allowed Luan to log in to National Public Data”
National Public Data CONTAINS members.zip
The breach narrative identifies members.zip as a publicly accessible file containing site source code and embedded administrator credentials; the file was found on the connected Records Check site.
Explicit Direction flagged Confidence 88% · Jack Rhysider EP 177 Details
“one file stood out, members.zip”
“Members.zip had Sal’s site’s source code, and buried inside the code were admin credentials.”