CriticalBreachHave I Been Pwned — public breach catalog· 25 Jul 2018

Exactis — 131.6M accounts

Severity: Critical · Kind: Data breach

Plain-English summary on the way

We've ingested this item but haven't summarised it yet. Read the upstream advisory using the link below in the meantime — the AI summary will appear here once the next run completes.

From the source

In June 2018, the marketing firm Exactis inadvertently publicly leaked 340 million records of personal data . Security researcher Vinny Troia of Night Lion Security discovered the leak contained multiple terabytes of personal information spread across hundreds of separate fields including addresses, phone numbers, family structures and extensive profiling data. The data was collected as part of Exactis' service as a "compiler and aggregator of premium business & consumer data" which they then sell for profiling and marketing purposes. A small subset of the exposed fields were provided to Have I Been Pwned and contained 132 million unique email addresses.

Breach facts

Accounts affected
131,577,763
Verified
Yes
Sensitive
No
Domain
exactis.com
Data exposed
Credit status informationDates of birthEducation levelsEmail addressesEthnicitiesFamily structureFinancial investmentsGendersHome ownership statusesIncome levelsIP addressesMarital statusesNamesNet worthsOccupationsPersonal interestsPhone numbersPhysical addressesReligionsSpoken languages

Was this useful?

00000Sign in to react

Plain-English summaries are AI-generated and reviewed for tone, not technical accuracy. For incident response, always rely on the original source linked above.