National Public Data Published Its Own Passwords

KrebsOnSecurity reports that National Public Data (NPD) suffered a breach exposing personal data — including names, addresses, phone numbers and Social Security Numbers for over 272 million people — and that a sister site, RecordsCheck, inadvertently hosted an archive (members.zip) containing source code and plaintext admin/user credentials; the stolen data has been sold by a criminal actor and widely leaked, increasing risk of identity theft and fraud, and the article recommends credit freezes and monitoring.