: Usernames and passwords for their internal systems.
The breach wasn't necessarily a complex hack but a critical oversight. A security researcher discovered that NPD had left a zip file—often identified as index_breached.vc.zip or similar variants—publicly accessible on their website. This file contained:
: Details on how their databases were structured and accessed. The Dark Web Leak