Every public data breach

44 disclosed this week · 26,355 on record

Data & Leads

Disclosed Nov 28, 201844,320,330 accountsUnverified

In November 2018, security researcher Bob Diachenko identified an unprotected database believed to be hosted by a data aggregator . Upon further investigation, the data was linked to marketing company Data & Leads . The exposed Elasticsearch instance contained over 44M unique email addresses along with names, IP and physical addresses, phone numbers and employment information. No response was received from Data & Leads when contacted by Bob and their site subsequently went offline.

What is known

People affected44,320,330 (accounts in the leaked data, per Have I Been Pwned)
DisclosedNov 28, 2018
HappenedNov 14, 2018
AttackNot stated
Data exposedEmailsEmploymentIP addressesNamesPhone numbersAddresses
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Data & Leads