USA Criminal Records

In May 2024, a database containing what appear to be United States criminal records was posted on an online leak forum by the threat actor known as USDoD. The people behind the posting claimed the database held roughly 70 million rows of personal data tied to arrests and criminal cases, spanning 2020 to 2024. Security researchers, including analysts at Malwarebytes, examined samples of the leak and confirmed the data contains criminal-case information, but the original source of the database has never been identified. It remains unclear whether this is a breach of a single company's systems or a compilation assembled from multiple sources.

The leak drew significant attention because of what the records expose: not just contact details, but arrest and conviction histories that most people expect to remain private unless legally disclosed.

What Information Was Compromised?

Our analysis found the following data types in this breach: height, weight, name, home address, and criminal records. The exact number of records for each data type is unknown.

Reporting by Cybernews and Fox News, based on analysis by Malwarebytes, describes additional fields in the leaked samples: full names, dates of birth, known aliases, postal addresses, dates of arrest, dates of conviction, sentences, and crime categories such as theft, burglary, or drug possession. The people who posted the database also claimed it included Social Security numbers, but researchers have not confirmed that.

Malwarebytes researcher Pieter Arntz told Fox News that each entry appears to represent a single arrest or case, rather than a complete criminal history for one person.

Not every individual is affected by every type of data listed here.

What Are the Potential Risks for Affected Individuals?

A leak of criminal records carries risks that go beyond typical identity theft:

Privacy exposure and stigma. Arrest and conviction data, including cases that may have been dismissed, expunged, or sealed, could become publicly searchable and follow someone long after a legal matter closed.

Targeted scams. People named in the leak could be contacted by fraudsters posing as lawyers, bail bondsmen, or government agencies, using real case details to appear credible.

Identity theft. With names, addresses, dates of birth, and potentially other identifiers in circulation, criminals can attempt account takeover, loan fraud, or tax fraud.

Extortion. Anyone whose record appears in the leak could be threatened with public exposure unless they pay.

What Is USA Criminal Records Doing in Response?

There is no confirmed company notice or public statement identifying the operator of this database or describing any response. Because the original source of the data has not been identified, no organization has acknowledged being breached or issued notifications tied to this leak.

What Should You Do If You Were Affected?

Because there is no official notification process for this leak, precautionary steps matter more than usual:

Check your credit reports at the three major bureaus and place a fraud alert or credit freeze with each one. Freezes are free and can be lifted when you need credit.

Monitor your IRS account and file your tax return early to reduce the risk of a fraudulent filing in your name.

Be skeptical of unexpected calls, emails, or letters referencing legal matters, arrests, or court dates. Verify any such claim directly with the relevant court or agency before responding or paying anything.

If you have an arrest or conviction record you believe is sealed, and you find it exposed online, consider contacting an attorney about your options.