Technology

Massive criminal records leak exposes 70M Americans' personal information

Published

2 years ago

June 1, 2024

Massive criminal records leak exposes 70M Americans' personal information

A group of cybercriminals leaked a database containing criminal records of 70 million Americans, according to cybersecurity company Malwarebytes.

The leak contained people’s full names, dates of birth, known aliases, postal addresses, dates of arrest, dates of conviction, sentences and more.

This is bad news for anyone who has been convicted in the past.

GET SECURITY ALERTS, EXPERT TIPS — SIGN UP FOR KURT’S NEWSLETTER — THE CYBERGUY REPORT HERE

Hacker typing on a keyboard. (Kurt “CyberGuy” Knutsson)

What happened: Detailed analysis of the incident

Malwarebytes posted the news of this data leak on its its blog. The wording suggests the company didn’t have direct access to the leaked database. Still, the post revealed plenty of information about the incident and the threat actors behind the attack.

The hacking groups EquationCorp and USDoD are reportedly responsible for a major data breach involving the criminal record database. The breach, which resulted in the online leak of the database, contains 70 million entries. It includes the full names, dates of birth, known aliases, addresses, arrest and conviction dates, sentences and other information of millions of Americans who had encounters with the U.S. justice system between 2020 and 2024.

We contacted Malwarebytes and spoke with Pieter Arntz, a security researcher at the company, who informed us that they were able to obtain a small sample of the criminal records, which are specific to individual incidents. Each entry represents either an arrest or a case rather than a comprehensive compilation of all crimes committed by a single person. In other words, these records provide a snapshot of discrete legal events rather than a comprehensive overview of an individual’s criminal history.

The exact source of this database is unknown. However, the hacker group USDoD, a major player in the field, is closely linked to “Pompompurin,” the operator of the original data leak site BreachForums. According to Malwarebytes, USDoD plans to create a successor to the second version of BreachForums, which was recently shut down by law enforcement. By releasing this database, USDoD might be trying to attract new users.

The same hacker is also believed to be involved in a breach at TransUnion, the data from which was partly dumped in September 2023.

A man with handcuffs on. (Kurt “CyberGuy” Knutsson)

MASSIVE DELL DATA BREACH HITS 49 MILLION USERS — WHAT THIS MEANS FOR YOUR PRIVACY AND SECURITY

What does this data leak mean for you?

If you’ve had a run-in with the law before, there’s a good chance that a bunch of the info you shared with law enforcement is now out there on the web. The exposure of such a comprehensive criminal database could have significant implications for law enforcement, judicial proceedings and the individuals mentioned within the dataset.

The hackers who pulled off the leak might be looking to make a quick buck by selling your data to shady characters on the dark web. They might also try to con you by pretending to be someone you trust or a legit company, aiming to get their hands on some cash.

This much bulk data can also be used by bad actors to threaten, harass and blackmail people with records similar to the Ashley Madison breach. For the unaware, In July 2015, a hacker group calling itself “The Impact Team” stole the user data of Ashley Madison, a commercial website billed as enabling extramarital affairs. These hackers copied personal information from the user base and threatened to expose users’ names and personal details unless Ashley Madison shut down right away.

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?

A woman working on her laptop. (Kurt “CyberGuy” Knutsson)

SNEAKY SPYWARE IS AFTER YOUR MOST SENSITIVE DATA

6 measures to take to protect yourself from a data breach

If you suspect you’ve been impacted by this data breach, follow these steps to protect your personal data and privacy.

1. Invest in identity theft protection: If you think your personal data has been leaked, scammers may try to impersonate you to gain access to your private information. The best thing you can do to protect yourself from this type of fraud is to subscribe to an identity theft service.

Identity Theft companies can monitor personal information like your Social Security Number (SSN), phone number and email address and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals. See my tips and best picks on how to protect yourself from identity theft.

2. Place a fraud alert: Contact one of the three major credit reporting agencies (Equifax, Experian or TransUnion) and request a fraud alert to be placed on your credit file. This will make it more difficult for identity thieves to open new accounts in your name without verification.

3. Be cautious of phishing attempts: Be vigilant about emails, phone calls or messages from unknown sources asking for personal information. Avoid clicking on suspicious links or providing sensitive details unless you can verify the legitimacy of the request.

The best way to protect yourself from clicking malicious links that install malware that may get access to your private information is to have antivirus protection installed on all your devices. This can also alert you of any phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android & iOS devices.

4. Check Social Security benefits: It is crucial to periodically check your Social Security benefits to ensure they have not been tampered with or altered in any way, safeguarding your financial security and preventing potential fraud.

5. Invest in removal services: While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Check out my top picks for removal services here.

6. Change your password: You can render a stolen password useless to thieves simply by changing it. Opt for a strong password — one you don’t use elsewhere. Even better, consider letting a password manager generate one for you.

AT&T DATA LEAK FROM 73 MILLION CUSTOMERS — WHAT YOU NEED TO DO NEXT

Kurt’s key takeaway

The fact that threat actors were able to leak such a comprehensive amount of data suggests serious loopholes in government systems. These issues need to be addressed to prevent data breaches like this from exposing people’s personal information. As there is currently no advisory from the government, you’ll have to take matters into your own hands. Stay extra vigilant against identity theft and targeted phishing attacks.

Have you ever been a victim of a data breach? If yes, what steps did you take to protect your personal data? Let us know by writing us at Cyberguy.com/Contact

For more of my tech tips & security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you’d like us to cover.

Follow Kurt on his social channels:

Answers to the most-asked CyberGuy questions:

Kurt “CyberGuy” Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on “FOX & Friends.” Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Technology

Did Live Nation punish a venue by taking Billie Eilish away?

Published

10 hours ago

March 4, 2026

Press Room

Did Live Nation punish a venue by taking Billie Eilish away?

John Abbamondi had orders to let the CEO of Ticketmaster down easy.

In April 2021, Abbamondi was the CEO of BSE Global, the company that ran Brooklyn arena the Barclays Center. BSE Global’s existing Ticketmaster contract would expire at the end of September, and Abbamondi and his team had evaluated proposals from SeatGeek, AXS, and Ticketmaster. The economics of Ticketmaster offer, according to Abbamondi, “was nowhere near as good as the other two.” SeatGeek’s technology was “superior” to Ticketmaster’s on balance, on top of better financial terms including an equity stake in the company, the arena decided. It clinched their decision to go with a newer, smaller player in the field.

When Abbamondi called to break the news to Michael Rapino, the Live Nation Entertainment CEO, the meeting became tense — and a recording of it came back to haunt Rapino in this month’s Live Nation-Ticketmaster monopoly trial. Abbamondi was one of two witnesses who took the stand Wednesday, alongside Mitch Helgerson, the chief revenue officer for the Minnesota Wild hockey team. Both men said that when they considered switching their venues’ ticketing platform from Ticketmaster, executives there threatened them with the loss of vital Live Nation-promoted concerts. It’s the behavior, the Justice Department and 40 state and district attorneys general say, of a monopolist — a charge Live Nation-Ticketmaster denies.

Abbamondi, identifying the voices on the 2021 call to a Manhattan jury Wednesday, said that “the nervous guy was me and the angry guy was Michael.” The few minutes played in court captures an exchange that went “sideways,” as Abbamondi put it, when he tried to thread a delicate needle: rejecting Ticketmaster’s services while trying to hold its parent company Live Nation to a separate contract promising to fill Barclays Center with concerts. At one point, Rapino dropped an F-bomb while discussing his frustration over a contractual dispute. He told Abbamondi he believed they were never planning to renew with Ticketmaster in the first place.

Rapino reminded Abbamondi about the new UBS Arena in Queens, which could draw more Live Nation-promoted shows away from Barclays. Though Ticketmaster theoretically operates separately from Live Nation, Abbamondi took this as a “not-so-veiled” threat — cut off the left arm, and the right arm would swing back. Abbamondi hung up feeling like he’d failed to “do my job there, which was to land the plane smoothly.”

The venue “saw a dramatic decline in Live Nation shows that were booked at the arena”

Abbamondi still signed the deal with SeatGeek, which began in October 2021. Then, he testified, the venue “saw a dramatic decline in Live Nation shows that were booked at the arena.” Artists were just beginning to fill stadiums again after the start of the covid pandemic, including Billie Eilish, who’d had to cancel shows in New York venues including Barclays in 2020. Normally, Abbamondi would have expected Live Nation to rebook her show there next time she was on tour. But when she began touring again in 2021, she booked at the new venue Rapino had warned about — the UBS Arena. When Barclays asked about it, they were told it was the “artist’s decision.” Other promoters, he said, hadn’t reduced their bookings at Barclays by nearly as much.

In 2022, mere months into the SeatGeek contract, Abbamondi was fired. Less than a year later, Barclays announced it was going back to Ticketmaster.

Ticketmaster, in the witnesses’ telling, wasn’t the best option for a ticketing vendor, but Live Nation’s power as a concert promoter forced their hand. In the case of the Minnesota Wild, which played at the then-Xcel Energy Center in St. Paul, Helgerson said the fear of losing Live Nation shows was a large driver behind its decision to stick with Ticketmaster — even though it found it would make $1 million a year more switching to SeatGeek.

The arena was already engaged in tight competition for concerts with the Target Center across the river in Minneapolis, a similarly-sized venue. So when the Wild kicked off negotiations over renewing its contract with Ticketmaster in 2018, the ticketing service knew how to hit them where it would hurt. When the Wild staff mentioned they were planning to consider a proposal from SeatGeek too, a Ticketmaster executive told them that Live Nation could move all of their shows to the Target Center if they switched ticketing vendors, Helgerson testified. “We took it as a credible threat,” he said. “Losing those shows would be almost catastrophic to our organization.”

“We took it as a credible threat”

To ease the risk, SeatGeek offered what it called “Live Nation retaliation insurance” — a promise to compensate the arena for concerts booked at the Target Center on dates Xcel had open. SeatGeek offered the arena a higher upfront bonus and fee share that overall would make the venue an additional $1 million a year compared to Ticketmaster’s offer. But even retaliation insurance couldn’t make up for the loss of the “vibrance of the venue” and the impact on its own employees should Live Nation pull its shows. Ticketmaster’s alleged threat created an “insurmountable challenge.” The venue signed another contract with Ticketmaster.

There were complicating factors in both these cases, which Live Nation pointed out on cross-examination. It was both risky and a lot of work to move to a new ticketing platform. Like switching any enterprise software, it would take a while for staff to get up to speed, and Abbamondi admitted that while SeatGeek’s technology gave them more options over things like how to price individual seats, it was less user-friendly. An executive whom Helgerson worked with worried that SeatGeek’s lack of an interface for concert promoters at the time would be an obstacle to getting them to bring shows to the arena. Abbamondi also said he’s personal friends with SeatGeek’s co-founder, and he testified he wasn’t fired because of the SeatGeek deal — he was given two other reasons.

SeatGeek offered what it called “Live Nation retaliation insurance”

There was also a separate legal dispute between the Barclays Center and Ticketmaster, which appeared to be at least part of the reason that the call between Abbamondi and Rapino broke down. Barclays believed their contract with Ticketmaster would expire at the end of September 2021, as originally stated. But Ticketmaster believed that because the Covid pandemic shortened the regular NBA season, a clause in the contract had been triggered to extend that contract another year. On top of that, in an earlier, unrecorded call between Abbamondi and Rapino, the Ticketmaster CEO suggested that they should be given the chance to counter any offer Barclays received. Abbamondi said he tried his best to respond in a “noncommittal” way, but the implication was that Rapino might have seen it differently.

The jury will have to decide whether the threats Abbamondi and Helgerson described were really as menacing as they believe, one of many factors that will determine whether Live Nation-Ticketmaster should face penalties — including the possibility of a breakup.

In one text exchange, Live Nation executive Patti Kim, a friend of Abbamondi’s, wrote that he should “think about the bigger relationship” with Live Nation, not just who’s writing the bigger check. She added a winky face. “That was my friend saying, ‘you know what I mean,’” Abbamondi said. This week, the jury is expected to get the chance to hear from the rival allegedly offering those bigger checks: SeatGeek CEO Jack Groetzinger.

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

Lauren Feiner

Technology

Scams that aren’t illegal (but should be)

Published

10 hours ago

March 4, 2026

Press Room

Scams that aren’t illegal (but should be)

NEWYou can now listen to Fox News articles!

Every year during National Consumer Protection Week, you hear warnings about phishing emails, fake IRS calls and identity theft. Those threats are real, but there is another risk that gets far less attention, and it is completely legal.

Right now, hundreds of companies collect, package and sell personal information, including your home address, phone number, family members, income estimates and even your daily habits. They are not targeting you because you did anything wrong. Instead, they profit simply because your data is valuable.

Unlike traditional scams, this does not happen in the shadows. It happens out in the open, every single day. As a result, most people only realize it is happening after someone uses their personal information against them.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Data brokers build detailed profiles using information pulled from public records, apps and online activity. (Kurt “CyberGuy” Knutsson)

Your personal information is a product

Data brokers are companies most people have never heard of, but they know a surprising amount about you. They collect information from public records, online activity, retail purchases, app usage and hundreds of other sources.

Then they build detailed profiles and sell them to advertisers, marketers and anyone else willing to pay. A typical profile may include:

Full names, ages and phone numbers
Home addresses
Names of relatives and household members
Estimated income, home value and net worth
Shopping habits and interests
Political, health and lifestyle indicators

This information often appears on people-search sites, where anyone can look you up in seconds. Scammers use these same databases to find and target victims. But even legitimate companies use them in ways most consumers never knowingly agreed to.

People-search sites expose more data than you realize

Search your own name online, and you may find pages listing your address, relatives’ names and contact details. These sites present themselves as “background check tools” or “public records directories.” But their business model depends on making personal information easy to find.

That creates real-world risks. Criminals use these sites to:
Impersonate banks, government agencies, or delivery services
Convince victims they already “know” them
Locate elderly or vulnerable individuals
Target family members using shared address history.

Even strangers can learn where you live, who your relatives are and how to contact you. No hacking required.

CRIMINALS ARE USING ZILLOW TO PLAN BREAK-INS. HERE’S HOW TO REMOVE YOUR HOME IN 10 MINUTES

People-search websites make your address, phone number and even family connections easy to find in seconds. (Serene Lee/SOPA Images/LightRocket via Getty Images)

Your browsing history is being tracked and sold

Many websites and apps track what you click, read and buy. Incogni’s research found that popular apps like TikTok, Alibaba, Temu and Shein collect numerous personally identifiable data points and share them with third parties, like advertising networks and data brokers.

Even web extensions track what you do online. Popular Chrome extensions like the AI-powered Grammarly or Quillbotinvade your privacy, require extensive permissions and collect sensitive data.

Over time, this data collection builds a behavioral profile. It can reveal:

Financial stress or debt concerns
Health interests or medical conditions
Major life events like moving, retirement, or the loss of a spouse
Online purchases and brand preferences.

This is why you may suddenly receive highly specific emails, calls, or ads that feel uncomfortably personal. Someone already knew what to say.

AI is accelerating data collection

AI makes personal data more valuable and easier to collect than ever before. These systems scrape public websites, social media profiles, images and videos to pull identifying details. They also connect scattered pieces of information into a single, detailed identity profile, which can include:

Photos connected to your name
Voice recordings from public videos
Employment history
Locations you’ve lived at or visited.

Once collected, this information can circulate indefinitely. You can delete a social media post, but copies of that data may already exist elsewhere.

5 SIMPLE TECH TIPS TO IMPROVE DIGITAL PRIVACY

The more accessible your personal data is, the easier it becomes for scammers to target you with convincing, personalized attacks. (Kurt “CyberGuy” Knutsson)

Most AI companies collect data by default, unless you opt out

Are you using ChatGPT, Gemini, or even LinkedIn? Then your data is automatically collected from your chatbot conversations, posts, and more. They collect user interactions like prompts, voice recordings, uploaded photos and behavioral data to improve the AI system.

In some cases, you have to manually disable this in settings, but it’s buried in countless opt-out guides or obscure labels. For example, to opt out of LinkedIn data collection, you need to:

Go to Settings and find the Privacy tab.
Find the toggle named ‘Data for Generative AI Improvement.’
Review other default data sharing options.
Disable everything from personal demographic information to social, economic and workplace research.

AI-powered apps and services continuously switch it up and make it harder for you to opt out. Why? Your data is fueling their business model. The more data points they have, the better they can train their AI and the more money they make.

Why this matters for your safety, not just your privacy

Most people think data collection is just about targeted ads. But the same information can be used to make scams far more convincing. Instead of sending generic phishing emails, scammers can reference your real address or recent activities.

For example: “Hi, Mr. Smith, this is your bank. We noticed unusual activity on your bank account, ending in 0123. Please confirm your information.”

Because the details are accurate, the message feels legitimate. This dramatically increases the chances someone will respond. In many cases, the information came from data broker databases that were legally purchased or accessed.

Consumer protection starts with reducing your digital footprint

National Consumer Protection Week is meant to empower people to protect themselves. That protection shouldn’t stop at obvious scams. It should include limiting how easily your personal information can be found in the first place.

A data removal service helps remove your personal data from data brokers and people-search sites that collect and sell it. Instead of submitting dozens or hundreds of manual requests yourself, they automate the process and continue removing your data as it reappears.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

Kurt’s key takeaways

When most people think about scams, they imagine criminals hiding in the shadows. But some of the biggest threats to your personal information are operating out in the open. Data brokers legally collect and sell detailed profiles about you. People-search sites make your address, phone number and even relatives easy to find in seconds. Your browsing activity is tracked, packaged and monetized. And now AI is speeding up how quickly that information can be gathered, connected and reused. This is not just about annoying ads. The more accessible your personal data is, the easier it becomes for scammers to sound convincing and target you with precision. Real consumer protection is not only about avoiding suspicious links. It is about limiting where your information lives and who can access it. The less strangers know about you, the harder it is to use your own data against you.

Have you ever searched for your name online and been surprised by what you found? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Technology

MacBook Neo versus an old MacBook Air: good luck

Published

22 hours ago

March 4, 2026

Press Room

MacBook Neo versus an old MacBook Air: good luck

My first thought when Apple announced the MacBook Neo today was “okay, but why not just get an older Air?” If you’re thinking that too, you might be right. If you can find one.

The Neo starts at $599 with an A18 Pro processor, 8GB of memory, and 256GB storage, and ends at $699 with the same specs plus TouchID and 512GB of storage. It has two USB-C (not Thunderbolt) ports, a pretty basic-looking screen, a mechanical trackpad instead of haptic, and various other cost-saving measures. It’s the cheapest new MacBook you can get now.

The new M5 MacBook Air starts at $1,099 with 16GB of memory and 512GB of much faster storage, a bigger and brighter screen, a better webcam, better Wi-Fi and Bluetooth, more speakers, Thunderbolt 4, a faster charger, and so forth. It’s $100 more than last year’s model, probably because of the Neo. Or you can get an M4 MacBook Air for $1000, with a slightly slower processor than the M5 (but still faster than the Air), and otherwise pretty much the same specs.

If you could still get a new M1 Air from Walmart for $700, it’d be a pretty tough call between that and the Neo. That machine came out in 2020, but is still better in most respects. Unfortunately, they’ve been out of stock since last month — probably because of the Neo — so that’s the end of that. You can probably find a refurb one. Same with the M3 and M4: if you can find one for around the same price as the Neo, especially with 16GB of RAM, you should get one of those. But they’re pretty thin on the ground, and I’d expect them to become thinner. (Keep an eye on Apple’s refurb site, though — a refurb M4 Air for $750 is pretty dang good.)

The modern Air is unquestionably a better computer. The thing about $1,000 is it’s a lot more money than $600. $600 is already more than most non-Mac people want to spend on a laptop, but it’s a lot less than an Air, and the gap between the two is big enough that it’s harder to justify the jump unless you know you’re gonna need more than 8GB of RAM, if you’re ever gonna use Thunderbolt, and so forth. I wouldn’t buy the Neo for myself.

The Neo isn’t meant to compete with the Air, though. It’s aiming for the first-time MacBook buyer. It’s Apple trying to pick up the cheap Windows laptop crowd who are annoyed by Windows. With its $499 price for education, it’s also an attempt to break the Chromebook’s stranglehold on the K-12 market, to turn iPad kids into MacBook Neo teens into Air adults. Heck, when it’s time for my kids to turn in their school-issued Chromebooks, and I have to choose between a Chromebook, a Windows laptop, and a MacBook Neo for them? That’ll be interesting.

And that’s how they get you!

I honestly don’t think the Neo vs Air debate is going to be that hard for most people, just because most people aren’t spending a thousand bucks on a laptop in the first place. The processor’s probably going to feel about the same as an M1 Air’s, which is to say fast enough for most things. The toughest parts are going to be figuring out if you’re satisfied with 8GB of RAM (rough!), if you ever really need Thunderbolt (maybe not?), and if you care about that fancy webcam (eh). If you already know the answer, you already know the answer. And you should probably grab that refurb Air while you can.

A cynical part of me thinks this is Apple trying to get MacBooks onto the same upgrade cycle as its phones. If you bought the cheapest MacBook Air six years ago, it’s probably still fine. If you buy the cheapest MacBook Neo today, is it going to feel fine in six years? Maybe! Or maybe you’ll decide you need to spring for an Air next time. And up the funnel you go.