Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteOn November 29, 2024, Cybernews reported that SL Data Services LLC, apparently linked to Propertyrec and other people-search or property-research websites, left an approximately 713GB database accessible online without a password or encryption. The report counted 644,869 PDF files; about 95% of a limited sample were labeled background checks. Public access was later closed after researcher Jeremiah Fowler reported the exposure.
This appears to have been an unsecured-database exposure, not a confirmed ransomware attack or proven hacking campaign. No public evidence establishes who accessed or downloaded the files, how many unique people were represented, or whether exposed information was used for fraud.
What the database contained
Cybernews reported that the files included combinations of:
- Names, home addresses, telephone numbers and email addresses
- Employment and family-member information
- Social-media accounts
- Criminal-history information
- Court records
- Vehicle information, including license plates and vehicle identification numbers
- Property-ownership reports
Those categories describe the reported contents, not every file. The report did not establish that all 644,869 PDFs contained every data element. It also did not list Social Security numbers, passwords, bank-account numbers or payment-card numbers among the exposed information. Cybernews’ account is the source for these figures and descriptions.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
Why different reports cite different numbers
The figures refer to different observations while the database was changing:
| Figure | What it means | Qualification |
|---|---|---|
| Approximately 713GB | Reported database size | A reported size, not an independently published forensic image |
| 513,876 | Earlier record count observed by the researcher | Recorded before the database grew |
| More than 600,000 | Rounded description used in coverage | Not a victim count |
| 644,869 | PDF files counted in the Cybernews report | Files may duplicate people or contain reports about multiple people |
| 664,934 | Later count reported after the database grew during the following week | Shows why totals differ across reports |
None of these numbers equals the number of affected individuals. One person can have several reports or updated versions, and some files concern property, vehicles or court matters rather than a single individual.
Was Propertyrec hacked?
There is no confirmed attacker, ransom demand or documented exfiltration event in the available reporting. The strongest evidence is that an internet-facing database accepted access without authentication and without encryption. It is therefore more accurate to call this an exposure or unsecured database than to state that hackers stole the data.
Fowler disclosed the issue through the responsible-disclosure process described by Cybernews. Access was subsequently restricted. Closing the endpoint does not prove that nobody viewed or copied files, that cached versions disappeared, or that all credentials and logs were reviewed.
Free tools Windows power users keep installed
One-click scans. No signup required.
Who was connected to the database?
Cybernews attributed the database to SL Data Services, LLC and reported folders for 16 website domains, including Propertyrec, which advertises property and real-estate research data. The reporting supports describing that connection as apparent or reported; it does not independently establish the complete corporate structure of every domain.
Cybernews also reported that Fowler did not receive a response from the company. The available reporting does not document a consumer-notification campaign, but that is not proof that no communication occurred through any channel.
Why public records can still create privacy risk
Some underlying court records and sex-offender-status information may be public records. Public availability at an official source does not make a bulk profile harmless. Combining addresses, relatives, employers, vehicle identifiers and criminal-history information makes targeted impersonation, harassment and profiling easier.
Detailed reports can also be wrong or outdated. Names may be mismatched, records may be incomplete, and sealed or expunged matters may be handled incorrectly. Employers, landlords and other decision-makers should not treat a data broker’s report as self-authenticating. Uses for employment, housing, credit, insurance and similar decisions may carry separate legal obligations; compliance depends on the applicable law and jurisdiction.
Potential risks for consumers
The following are plausible consequences of this type of exposure, not documented results of this incident:
- Phishing messages that use a real address, employer or relative’s name
- Impersonation and social-engineering attempts
- Attempts to answer account-recovery questions or redirect recovery contacts
- Harassment, stalking or doxxing
- Fraudulent employment, rental or financial applications
- Targeting of relatives, employers or associates
- Reputational damage from inaccurate or stale criminal-history information
What is still unknown
- Whether anyone downloaded the files
- How many unique people were represented
- Whether copies remain on other systems
- Whether regulators investigated
- Whether Social Security numbers or financial credentials appeared in any unreviewed files
- Whether affected individuals received direct notice
What potentially affected people should do
- Freeze your credit. Request freezes separately from Equifax, Experian and TransUnion. The Federal Trade Commission’s recovery guide explains the process: FTC identity-theft recovery guide.
- Review reports and account activity. Check for unfamiliar inquiries, accounts, addresses, employers, collection accounts or changed contact details.
- Use a fraud alert if misuse is suspected. The FTC guide describes initial and extended alerts and the documentation generally required after identity theft.
- Harden email and financial accounts. Use unique passwords, enable multifactor authentication, and verify recovery email addresses and telephone numbers.
- Expect personalized scams. Treat messages mentioning relatives, employers, addresses or court history as untrusted. Do not click links or disclose codes from unsolicited contacts.
- Avoid dubious “breach lookup” sites. A service demanding your Social Security number, full identity profile or payment card to check exposure can create another privacy risk.
- Document and report fraud. Preserve messages, phone numbers, alerts and transaction records. If identity theft occurs, use the FTC’s recovery process and contact affected financial institutions.
Guidance for employers, landlords and other report users
- Confirm the provider’s access controls, encryption, retention limits and access-log practices.
- Ask how consumers can dispute and correct inaccurate, mismatched, sealed or expunged records.
- Use reports only for legally permitted purposes and apply the required notices and adverse-action procedures.
- Download and retain only the minimum information needed for the decision.
- Require continuous monitoring for internet-exposed storage rather than relying on a one-time security review.
How this differs from the National Public Data incident
Cybernews placed this event in the broader context of the August 2024 National Public Data incident, but the events involved different companies and different circumstances. National Public Data was reported as a separate breach with claims involving billions of records and was followed by bankruptcy proceedings. The SL Data Services event was reported as an unsecured database exposure. In both cases, record totals should not be treated automatically as unique-person totals because files can be duplicated, historical or associated with more than one person.
Are paid removal or monitoring services worth considering?
Paid tools can reduce the time required to submit recurring opt-out requests or combine monitoring and recovery services. They cannot erase official court or vehicle repositories, guarantee that a broker will not reacquire information, or remove copies already downloaded. A paid service complements—not replaces—a credit freeze and account security.
| Service | Potential fit | Important limitation |
|---|---|---|
| Aura | All-in-one data-broker removal, monitoring, remediation and insurance | Family pricing was shown at $32 per month billed annually or $50 monthly when reviewed; promotions can change, so verify the live page |
| Optery | Exposure reports, screenshots and broker-removal tools | Does not remove records from official government repositories or provide every identity-theft feature |
| Incogni | Automated, recurring data-removal requests | Live pricing should be checked; it is not a substitute for comprehensive financial-fraud coverage |
Free measures—credit freezes, account alerts, multifactor authentication, FTC guidance and manual opt-outs—cover the most important immediate protections.
The Bottom Line
The November 2024 incident established that a large SL Data Services database was left openly accessible, not that a confirmed hacker stole 600,000 people’s identities. Treat the exposure seriously, freeze your credit, secure accounts and watch for personalized scams, while recognizing that the number of unique affected people and any downstream misuse remain unknown.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
