Data & Leads
Disclosed Nov 28, 20187 years ago44,320,330 accountsUnverified
In November 2018, security researcher Bob Diachenko identified an unprotected database believed to be hosted by a data aggregator . Upon further investigation, the data was linked to marketing company Data & Leads . The exposed Elasticsearch instance contained over 44M unique email addresses along with names, IP and physical addresses, phone numbers and employment information. No response was received from Data & Leads when contacted by Bob and their site subsequently went offline.
What is known
| People affected | 44,320,330 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Nov 28, 2018 |
| Happened | Nov 14, 2018 |
| Attack | Not stated |
| Data exposed | Emails, Employment, IP addresses, Names, Phone numbers, Addresses |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Data & Leadshaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Nov 28, 2018 | 44,320,330 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.