Business
Massive data breach that includes Social Security numbers may be even worse than suspected
The company whose data breach potentially exposed every American’s Social Security number to identity thieves finally has acknowledged the data theft — and said hackers obtained even more sensitive information than previously reported.
National Public Data, a Florida-based company that collects personal information for background checks, posted a “Security Incident” notice on its site to report “potential leaks of certain data in April 2024 and summer 2024.” The company said the breach appeared to involve a third party “that was trying to hack into data in late December 2023.”
According to a class-action lawsuit filed in U.S. District Court in Fort Lauderdale, Fla., the hacking group USDoD claimed in April to have stolen personal records of 2.9 billion people from National Public Data. Posting in a forum popular among hackers, the group offered to sell the data, which included records from the United States, Canada and the United Kingdom, for $3.5 million, a cybersecurity expert said in a post on X.
Last week, a purported member of USDoD identified only as Felice told the hacking forum that they were offering “the full NPD database,” according to a screenshot taken by BleepingComputer. The information consists of about 2.7 billion records, each of which includes a person’s full name, address, date of birth, Social Security number and phone number, along with alternate names and birth dates, Felice claimed.
None of the information was encrypted.
Such a release would be problematic enough. But according to National Public Data, the breach also included email addresses — a crucial piece for identity thieves and fraudsters.
Having a person’s email address makes it easier to target them with phishing attacks, which try to dupe people into revealing passwords to financial accounts or downloading malware that can extract sensitive personal information from your devices. In addition, because many people use their email address to log into online accounts, it could be used to try to hijack those accounts through password resets.
It’s not clear what, exactly, has been leaked on the dark web from the breach. In a very small sampling of scans using Google One, email addresses taken during the National Public Data breach did not appear. But a free tool from the cybersecurity company Pentester found that other personal data purportedly exposed by the breach, including Social Security numbers, were on the dark web.
National Public Data said on its website that it will notify individuals if there are “further significant developments” applicable to them. “We have also implemented additional security measures in efforts to prevent the reoccurrence of such a breach and to protect our systems,” it said.
Previously, in an email sent to people who’d sought information about their accounts, the company said that it had “purged the entire database, as a whole, of any and all entries, essentially opting everyone out.” As a result, it said, it has deleted any “non-public personal information” about people, although it added, “We may be required to retain certain records to comply with legal obligations.”
The company did not respond to a request for comment. Under a number of state laws, including California’s, companies must notify any individual whose personal information is reasonably believed to have been taken by an unauthorized person.
At this point, it appears that the only notice provided by National Public Data is the page on its website, which states, “We are notifying you so that you can take action which will assist to minimize or eliminate potential harm. We strongly advise you to take preventive measures to help prevent and detect any misuse of your information.”
The steps recommended by National Public Data include checking your financial accounts for unauthorized activity and placing a free fraud alert on your accounts at the three major credit bureaus, Equifax, Experian and TransUnion. Once you’ve placed a fraud alert on your account, the company advised, ask for a free credit report, then check it for accounts and inquiries that you don’t recognize. “These can be signs of identity theft.”
Security experts also advise putting a freeze on your credit files at the three major credit bureaus. You can do so for free, and it will prevent criminals from taking out loans, signing up for credit cards and opening financial accounts under your name. The catch is that you’ll need to remember to lift the freeze temporarily if you are obtaining or applying for something that requires a credit check.
In the meantime, security experts say, make sure all of your online accounts use two-factor authorization to make them harder to hijack.
It’s also important to look for signs that an email or text is not legitimate, given the spread of “imposter scams.” Using messages disguised to look like an urgent inquiry from your bank or service provider, these scams try to dupe you into giving up keys to your identity and, potentially, your savings. Any request for sensitive personal information is a giant red flag.
Aleksandr Valentij of cybersecurity company Surfshark suggested checking the sender’s email address carefully to see if it doesn’t precisely match the name of the organization they purportedly represent, and looking for typos or grammatical errors — two telltale signs of a scam. And if the message is from someone you’ve never interacted with before, Valentij said, avoid clicking on links, including an “unsubscribe” link or button, because bad actors will use them for malicious purposes.
“If you suspect that you’ve received a phishing email, don’t interact with it and report it to your email provider,” Valentij said. “If it’s someone pretending to be a legitimate organization, you should also report it to that organization. Once that’s done, delete the email and stay vigilant for similar emails in the future.”
Business
Video: The Hidden Number Driving U.S. Job Growth
new video loaded: The Hidden Number Driving U.S. Job Growth
By Ben Casselman, Christina Thornell, Christina Shaman, June Kim and Nikolay Nikolov
February 13, 2026
Business
Why Mattel now has a problem with Barbie
Barbie manufacturer Mattel took a hit this week after its superstar doll failed to deliver.
The El Segundo company behind many of the world’s most iconic toys was walloped in the stock market — its shares plunged 25% Wednesday — after it announced that holiday-season sales were weak and that it expects another slow year.
It was overoptimistic about how many Barbies and other products consumers would want and had to slash prices to move them, even as it grappled with higher costs from tariffs, analysts said.
“2025 was marked by uncertainty,” Ynon Kreiz, chief executive of the company, said after earnings were unveiled Tuesday.
While Mattel’s Hot Wheels were hot, and its party card game Uno attracted new fans, Barbie has been struggling. Mattel’s Fisher-Price line, which makes educational toys for infants, toddlers and preschoolers, also lagged.
The doll and its many variants have been losing momentum since her latest 15 minutes in the spotlight following the 2023 hit movie “Barbie.” This year, Mattel says it will increase its focus on making more digital games and toys tied to movie franchises.
Last year, its net sales were about $5.3 billion, down 1% from the year before, according to the company’s unaudited financial statements. Its projection for this year also disappointed investors. The company lost close to $1 billion in market value as investors dumped its shares.
The movie that was the fun half of the “Barbenheimer” summer took in close to $1.5 billion at the box office and rejuvenated buzz around the 60-something Barbie, sparking more than $150 million in sales from dolls and other related products. At the time, it seemed to validate the toymaker’s strategy of turning its legacy brands into modern media properties, with live-action films. It has not been able to repeat that success yet, and that failure has weighed on its earnings.
Despite efforts to create buzz around the Barbie brand — including a diabetes Barbie and an autism Barbie — gross billings for Barbie products slid 11% last year, following a similar decline in 2024.
Mattel on Tuesday said it plans to double down on its strategy to become, as its CEO called it, an “IP-driven play and family entertainment business.” That means it wants to make more money from video games and movies.
Though toys are foundational to Mattel, the company said it is trying to broaden its reach by focusing more on content licensing and digital games, which tend to be more profitable.
Mattel has long worked with Disney to make princess dolls and has partnered with Netflix to make toys inspired by characters from the 2025 movie “KPop Demon Hunters.” The K-pop-inspired products will ship in the spring, and Mattel expects them to boost doll sales.
This week, it announced a deal to develop and market toys tied to the Teenage Mutant Ninja Turtles franchise, which is scheduled to have a new movie next year. It can also expect a jump in interest around its toys connected to the Masters of the Universe franchise and Matchbox brand, both slated to have movies this year.
“Success in our toy business will drive success in entertainment, and success in entertainment will drive greater success in toys,” Kreiz said. “We are looking to fully capitalize on this virtuous cycle.”
The company literally doubled down on one of its biggest bets on digital games.
Mattel announced plans to spend around $160 million to acquire the other half of mobile games studio Mattel 163, a joint venture between Mattel and the Chinese internet and video game company NetEase.
The studio has released four games based on Mattel’s intellectual property since it was established in 2018.
Mattel plans to make more “games based on Mattel IP that drive sustained engagement for fans,” Kreiz said in a statement.
The acquisition will temporarily impact Mattel’s bottom line but is intended to “accelerate growth in top and bottom lines in 2027 and beyond,” Kreiz said on the call.
For some, Mattel’s big plans to diversify away from toys haven’t been successful enough to spark confidence that the company can pull it off this year.
Morningstar analyst Jaime Katz said Mattel’s digital strategy has not panned out in the decade since company leadership started touting it.
“Every year we’re expecting the next year to be a growth year,” Katz said. “It looks now like we’re going to have another year where it’s stuck.”
Business
Disney to pay $2.75 million to settle alleged violations of the California Consumer Privacy Act
Walt Disney Co. will pay $2.75 million to settle allegations that it violated the California Consumer Privacy Act by not fully complying with consumers’ requests to opt out of data sharing on its streaming services, the state attorney general’s office said Wednesday.
The Burbank media and entertainment company allegedly restricted the extent of opt-out requests, including complying with users’ petitions only on the device or streaming services they processed it from, or stopping the sharing of consumers’ personal data through Disney’s advertising platform but not those of specific ad-tech companies whose code was embedded on Disney websites and apps, the attorney general’s office said.
In addition to the fine, the settlement, which is subject to court approval, will require Disney to enact a “consumer-friendly, easy to execute” process that allows users to opt-out of the sale or sharing of their data with as few steps as possible, according to court documents.
“Consumers shouldn’t have to go to infinity and beyond to assert their privacy rights,” Atty. Gen. Rob Bonta said in a statement. “In California, asking a business to stop selling your data should not be complicated or cumbersome.”
A Disney spokesperson said in a statement that the company “continues to invest significant resources to set the standard for responsible and transparent data practices across our streaming services.”
“As technology and media continue to evolve, protecting the privacy and preserving the experience of Californians and fans everywhere remains a longstanding priority for Disney,” the spokesperson said.
The settlement with Disney stemmed from a 2024 investigation by the attorney general’s office into streaming devices and apps for alleged violations of the California Consumer Privacy Act, which governs the collection of consumers’ personal data by businesses.
Under the law, businesses that sell or share personal data for targeted advertising must give users the right to opt-out.
Disney’s $2.75-million payment is the largest such settlement under the state privacy act, Bonta’s office said.
The attorney general has also reached settlements with companies such as beauty retailer Sephora, food delivery app DoorDash and SlingTV for alleged violations of the privacy act.
-
Politics1 week agoWhite House says murder rate plummeted to lowest level since 1900 under Trump administration
-
Alabama6 days agoGeneva’s Kiera Howell, 16, auditions for ‘American Idol’ season 24
-
Politics1 week agoTrump unveils new rendering of sprawling White House ballroom project
-
San Francisco, CA1 week agoExclusive | Super Bowl 2026: Guide to the hottest events, concerts and parties happening in San Francisco
-
Ohio1 week agoOhio town launching treasure hunt for $10K worth of gold, jewelry
-
Culture1 week agoAnnotating the Judge’s Decision in the Case of Liam Conejo Ramos, a 5-Year-Old Detained by ICE
-
Culture1 week agoIs Emily Brontë’s ‘Wuthering Heights’ Actually the Greatest Love Story of All Time?
-
News1 week agoThe Long Goodbye: A California Couple Self-Deports to Mexico