Share this article on:
Threat actors claim to have access to a US criminal database with over 70 million records containing personal data.
Infamous threat actor “USDoD” posted to the LeakBase hacking forum last week, claiming to be releasing a database containing the personal details of US criminals.
According to the hackers, compromised data includes full names, generation, date of birth, birth state, address, age, social security number, hair colour, eye colour, height, weight, race, sex, skin tone, whether or not a criminal has any defining scars, military service, charges, offence date and code, plea, conviction date, conviction place, sentence, probation, court, parole date, release date, admitted date, arresting agency, court costs and much more.
The data, which was dated between 2020 and 2024, came to a total of 22 gigabytes uncompressed and 3 gigabytes compressed.
While the post was made by USDoD, posts on X (formerly Twitter) by Dark Web Informer, a well-known cyber expert, suggest that threat actors EquationCorp and SXUL were responsible for the attack.
USDoD also credits SXUL.
🚨MAJOR DATA BREACH🚨Notorious threat actors, @EquationCorp and SXUL, have allegedly breached 70 Million rows of data related to a Criminal database.#DarkWeb #Cybersecurity #Security #Cyberattack #Cybercrime #Privacy #Infosec
— Dark Web Informer (@DarkWebInformer) May 19, 2024
Compromised Data: Fulltexts… pic.twitter.com/BYB65GgV2C
At this stage, the legitimacy of the data has not been verified, and no US government body has come forward with a statement.
Despite USDoD’s notoriety, the threat actor’s appearance on LeakBase is unheard of. As acknowledged in the hacker’s post, USDoD has come from the now FBI-seized BreachForums.
In fact, USDoD’s move to LeakBase is unlikely to be permanent, after the hacker announced the launch of Breach Nation, a replacement forum of which they would be the sole admin and owner.
“Ladies & gentlemen, prepare for landing,” he wrote on X.
“Fasten your seat belts, thank you for flying USDoD Airlines
“Oh and me, call me the captain, DoD
“So, together we stand, divided we fall
“United we form Breach Nation and take on all.”
Breach Nation is expected to launch in early July, according to the post.
“The new domains will be http://breachnation.io and http://databreached.io, with a planned launch date of July 4, 2024, coinciding with Independence Day,” USDoD said.