Over 100 million Americans had their personal information exposed.

MC2 Data and similar companies operate as comprehensive background check service providers. They collect, process, and analyze vast amounts of publicly available data from various sources to generate detailed reports on an individual, including criminal records, employment history, family data, and contact information.

They use this information to create comprehensive profiles that help employers, landlords, financial institutions, and many others make informed decisions and manage risk, such as making the right decisions about whether to hire an employee, rent a house, or grant credit to an individual.

Despite working with a vast amount of sensitive personal data, this company made a serious security blunder. In a recent investigation, Cybernews discovered that the company had exposed a massive database of 2.2 terabytes without any password protection or authentication system. This means that anyone on the internet can freely access this huge amount of data with ease, posing a risk of leaking the personal information of millions of users.

This serious security breach resulted in the leak of a massive amount of personal data belonging to American citizens. It is estimated that up to 106,316,633 records containing private information were compromised, affecting at least 100 million individuals. The initial cause has been identified as human error, raising serious concerns about the privacy and security of people's personal information.

The leaked data includes names, email addresses, IP addresses, encrypted passwords, home addresses, dates of birth, phone numbers, property records, legal records, family data, and employment history.

By regulation, businesses providing background checks and public records services face an extremely complex web of regulations. They need to comply not only with federal laws but also with specific state and local requirements. This is to ensure that their operations are always compliant with the law and that individual privacy is protected to the fullest extent.

The data leak discovered by Cybernews has exposed serious flaws in how companies like MC2 Data manage and protect personal information. The exposure of a large amount of personally identifiable information (PII) not only severely violates the privacy of millions of users but also puts them at high risk of data misuse, identity theft, and becoming targets of cyberattacks. At the same time, this incident has serious consequences for MC2 Data's reputation, potentially leading to legal investigations and financial losses.

Aras Nazarovas, a security expert at Cybernews, issued a serious warning about the potential for exploitation of background check services. He stated: "These services often become powerful tools for cybercriminals. By purchasing these services, criminals can easily gather a large amount of personal information about potential victims, thereby planning and executing scams, extortion, or even more sophisticated cyberattacks."

Despite the numerous security measures implemented by background check companies, data leaks still occur. This demonstrates that current measures are insufficient to completely prevent the exploitation of user data.

When the personal information of millions of people is leaked, it becomes a goldmine for cybercriminals. With this massive amount of data, criminals can easily identify potential targets and carry out attacks more effectively, minimizing the risk of detection.

Research by Cybernews has shown that people who have used background check services are often prime targets for cybercriminals. The personal information of these individuals, including employers, landlords, and law enforcement agencies, is highly valuable and often very sensitive.

Phan Van Hoa