Massive Data Breach Exposes Social Security Numbers, Leaving Millions Vulnerable

In January 2026, cybersecurity researchers at UpGuard discovered a massive data breach, exposing billions of sensitive personal records online, including Social Security numbers (SSNs), email addresses, and passwords. While it’s unclear who set up the database, the breach appears to involve a mix of old datasets from previous data breaches, possibly including the 2024 National Public Data breach. One of the most alarming findings was that approximately 25% of the SSNs in a sample of 2.8 million records appeared valid, potentially affecting hundreds of millions of Americans. The researchers note that while the information has not yet been exploited by cybercriminals, the long-term risks remain significant, especially as SSNs are crucial for identity theft. Despite being hosted by the German cloud provider Hetzner, the database was removed after researchers alerted the company. However, the data’s potential for exploitation remains a serious concern, as individuals may not know their information has been exposed. This incident underscores the ongoing threat posed by data breaches, which can leave personal information vulnerable for decades.