Millions of Americans’ Criminal Records Leaked Online

Cybercriminal groups EquationCorp and USDoD have leaked the criminal records of millions of Americans online. According to a blog post by Malwarebytes, the exposed database contains 70 million rows of data, including sensitive personal information such as full names, dates of birth, known aliases, addresses, arrest and conviction dates, and sentences. The data covers criminal activities from 2020 to 2024.

The source of this leaked database remains unknown. Each row in the database represents a single felony rather than an individual's complete criminal history. This detail may offer some relief to those with multiple convictions, as their entire criminal records may not be exposed.

USDoD, a high-profile hacker group, is closely associated with "Pompompurin," who was once the operator of the now-dismantled BreachForums, a notorious underground forum for sharing stolen data. Following the seizure of BreachForums by law enforcement, USDoD is reportedly planning to establish a successor site. Releasing this database appears to be a strategic move to generate interest and attract users to their new platform.

The leaked data can be exploited in various ways, including identity theft, targeted phishing attacks, and other forms of cybercrime. Individuals affected by this breach should be vigilant and take proactive measures to protect themselves.

To mitigate the risks, individuals should immediately change their passwords, using strong and unique combinations ideally managed through a password manager. Enabling two-factor authentication with FIDO2-compliant hardware keys or devices adds an extra layer of security that is less susceptible to phishing.

Additionally, it is crucial to verify any communications from vendors through alternate channels and to be cautious of supposedly urgent messages — these may be phishing attempts. Enrolling in identity monitoring services can also provide alerts if personal information is found being traded online and assist with recovery efforts.

Finally, tools like have i been pwned? can help determine if data has been exposed and offer further steps to secure information.