Latest CheckMate News
Feb 4, 2023
By PeopleConnect, the owners of the TruthFinder and Instant Checkmate background check services, confirmed they suffered a data breach after hackers leaked a 2019 backup database containing the info of millions of customers. TruthFinder and Instant Checkmate are subscription-based services allowing customers to perform background checks on other people. When conducting background checks, the sites will use publicly scraped data, federal, state, and court records, criminal records, social media, and other sources. In 2020, PubRec, LLC (owners of TruthFinder and Instant Checkmate) merged with PeopleConnect Holdings, Inc. (the owners of Classmates and Intellius), creating a massive portfolio of services specialized in finding information about people. Stolen data leaked on a hacking forum On January 21st, a member of the Breached hacking and data breach forum leaked the data for allegedly 20.22 million TruthFinder and Instant Checkmate customers who used the services up to April 16th, 2019. Leak of TruthFinder and Instant Checkmate data on Breached forums Source: BleepingComputer The stolen data was shared as two 2.9 GB CSV files containing only customer information before the backup was created on April 16th, 2019. The threat actor claimed that the data consisted of the following: | File User Count+-----------------------------------------| InstantCheckMate............: 11,945,733| TruthFinder.................: 8,270,551| TruthFinderInternational....: 4,625| Others......................: 98 The exposed TruthFinder and Instant Checkmate customer information includes email addresses, hashed passwords, first and last names, and phone numbers. Pompompurin, the owner of the Breached forum, told BleepingComputer that the data was stolen from an exposed database backup found by a forum member. Data breach confirmed After BleepingComputer and Troy Hunt of Have I Been Pwned contacted PeopleConnect about the data leak earlier this week, the company immediately launched an investigation and was transparent about its intentions to disclose the incident. Today, PeopleConnect published notices on both Instant Checkmate and TruthFinder confirming that both services suffered a data breach. "We learned recently that a list, including name, email, telephone number in some instances, as well as securely encrypted passwords and expired and inactive password reset tokens, of TruthFinder subscribers was being discussed and made available in an online forum," reads the data security incident notices. "We have confirmed that the list was created several years ago and appears to include all customer accounts created between 2011 and 2019. The published list originated inside our company." While PeopleConnect is still investigating the incident, the company says it appears to be an "inadvertent leak or theft of a particular list." The company has engaged with a third-party cybersecurity firm to investigate the incident and found no evidence of their network being breached. PeopleConnect warns to be on the lookout for targeted phishing attacks and that they will provide further updates as more information becomes available. Hunt will be adding the leaked data to Have I Been Pwned today, and users will be able to use the service to confirm if their account information was exposed. Related Articles:
CheckMate Frequently Asked Questions (FAQ)
Where is CheckMate's headquarters?
CheckMate's headquarters is located at 661 Saint Andrews Blvd, Charleston.
Who are CheckMate's competitors?
Competitors of CheckMate include Every and 4 more.
Compare CheckMate to Competitors
VerificationManager operates as an automated employment verification platform. It offers secure and automated processing of verification of income (VOI) and verification of employment (VOE) requests. The company was founded in 2010 and is based in Phoenix, Arizona.
Xactus is a company focused on verification innovation within the mortgage industry. The company offers a range of services including credit solutions, verification services, fraud detection, property solutions, score optimization, and data solutions, all aimed at streamlining workflows and enhancing the efficiency of mortgage processes. Xactus primarily serves the mortgage industry, with clients ranging from large banks and non-bank mortgage originators to credit unions and mortgage brokers. Xactus was formerly known as Avantus LLC. It was founded in 1928 and is based in West Haven, Connecticut.
Payroll Vault operates as a payroll and human resource (HR) outsourcing service provider. The company offers services such as time and attendance management, background checks, benefits management, workforce management, payroll financing, labor law poster services, and more. It serves small and medium-sized businesses. The company was founded in 2008 and is based in Littleton, Colorado.
EmpInfo is a company that focuses on automating the verification of employment and income, operating within the human resources and financial services sectors. The company provides a platform that streamlines the verification process for employers, verifiers, and employees, offering a secure and efficient way to confirm employment and income details. Its primary customers are employers looking to reduce administrative burden and mitigate privacy risks, as well as lenders, pre-employment screeners, government agencies, and landlords who require verified employment and income information. It was founded in 2011 and is based in San Jose, California.
SettlementOne is a company that focuses on providing data and credit verification solutions in the mortgage industry. The company offers services such as credit reporting, data verification, and valuation solutions, which help to mitigate risk, improve operational efficiency, and streamline the lending process. SettlementOne primarily sells to sectors such as banks, mortgage lenders, mortgage brokers, and credit unions. It is based in San Diego, California.
Truv provides income and employment verification solutions. The company enables income, employment, and insurance verification for lenders, paycheck-linked loans, direct deposit switch, employment history verification, and more. The company was formerly known as Citadel. It was founded in 2020 and is based in New York, New York.