Back to Radar
EX

Exactis

Critical

The 2018 Exactis breach exposed 340 million records of personal user data.

Records exposed
131,577,763 records
Breach date
Breach Jun 1, 2018
Last update
Updated Jul 25, 2018

What data was exposed?

Fields reported as compromised in this breach record.

Credit status informationDates of birthEducation levelsEmail addressesEthnicitiesFamily structureFinancial investmentsGendersHome ownership statusesIncome levelsIP addressesMarital statusesNamesNet worthsOccupationsPersonal interestsPhone numbersPhysical addressesReligionsSpoken languages

Why does this breach matter?

In-depth analysis of the breach and its implications.

In June 2018, Exactis, a marketing firm, experienced a significant data breach in which a public database containing approximately 340 million records of personal information was discovered by a security researcher. The exposed data spanned multiple terabytes and included sensitive profiling details such as names, addresses, email addresses, phone numbers, and other demographic information, acquired for marketing and consumer data aggregation purposes. As a result, approximately 131 million unique records were accessible, highlighting the need for stringent data protection measures for organizations handling extensive user information.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users became susceptible to targeted phishing and identity fraud risks.
Business Impact
The breach harmed Exactis' reputation, raising concerns over data privacy and handling.
Affected Sectors
  • Marketing
  • Data Aggregation
  • Consumer Analytics
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Monitor your personal accounts for unusual activities.
  • Be wary of targeted marketing and phishing attempts.
  • Enable two-factor authentication on all critical accounts.

Preventive Measures

  • Avoid sharing unnecessary personal information online.
  • Support legislation promoting data privacy and accountability.
  • Engage only with entities prioritizing secure data handling.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Personal demographic and contact data including emails, phone numbers, and addresses were among the leaked dataset.