EXPLORINEER
en

Archive — US — techcrunch

California privacy regulator seeks to fine Florida data broker after huge breachof Social Security numbers

California's privacy regulator is pursuing a $46,000 fine against National Public Data, a Florida data broker, for failing to register after a significant breach in 2024 exposed millions of Social Security numbers. The breach affected around 270 million individuals, leading to the company's bankruptcy filing, which was rejected by a Florida court, allowing for further legal action.

Key points

  • The California Privacy Protection Agency (CPPA) seeks to fine National Public Data $46,000 for not registering as a data broker.
  • National Public Data experienced a major data breach in April 2024 where hackers stole databases, affecting approximately 270 million individuals.
  • The breach resulted in the loss of hundreds of millions of Social Security numbers, considered one of the largest data breaches of 2024.
  • Following the breach, National Public Data filed for bankruptcy protection, but a Florida court rejected the petition, enabling further legal action.
  • The CPPA claims National Public Data registered late (on September 18, 2024) and only after enforcement actions were taken.
  • This marks the CPPA's sixth enforcement action against a data broker since its establishment.

Why it matters

  • Data brokers have been under increased scrutiny due to a rising number of data breaches and privacy violations in recent years.
  • The California Consumer Privacy Act (CCPA) emphasizes stricter regulations and accountability for data handlers in the state.
  • Similar breaches and subsequent regulatory actions have been observed globally, as privacy concerns continue to escalate.
  • By 2025, the trend of enhanced privacy regulations and legal consequences for data mishandling is expected to grow, paralleling the need for better data protection measures.

The CPPA's ongoing enforcement actions against National Public Data highlight the serious implications of data breaches and underscore the necessity for compliance with privacy laws, as the landscape for data protection evolves.