Exactis

Disclosed Jun 27, 2018131,577,763 accountsUnverified

Marketing firm leaves database of 340 million records exposed online

Researcher Vinny Troia found that data broker Exactis had exposed a database of close to 340 million records on a publicly accessible server, including contact details and personal profiling data.

What is known

People affected	131,577,763 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Jun 27, 2018
Happened	Jun 1, 2018
Attack	Exposed data
Data exposed	FinancialDates of birthEducation recordsEmailsIP addressesNamesEmploymentPhone numbersAddressesOther
Sector	Data brokers · US
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Exactis

Newswired.com

Marketing Firm Exactis Leaked a Personal Info Database With 340 Million Records

Notices filed

TotalJun 27, 2018

ResearchCount not stated

Accounts in the dataJul 25, 2018

Have I Been Pwned131,577,763 people

History of this record

source_type2026-09-25

aggregator to pressby seedSource

source_url2026-09-25

https://haveibeenpwned.com/Breach/Exactis to https://www.wired.com/story/exactis-database-leak-340-million-records/by seedSource

country2026-09-25

empty to USby seedSource

sector2026-09-25

tech to databy seedSource

attack2026-09-25

lost-device to misconfigurationby seedSource

data_types2026-09-25

["financial","dob","education","emails","ip-addresses","names","employment","phone","addresses"] to ["financial","dob","education","emails","ip-addresses","names","employment","phone","addresses","other"]by seedSource

disclosed2026-09-25

2018-07-25 to 2018-06-27by seedSource

summary2026-09-25

In June 2018, the marketing firm Exactis inadvertently publicly leaked 340 million records of personal data . Security researcher Vinny Troia of Night Lion Security discovered the leak contained multiple terabytes of personal information sp to Researcher Vinny Troia found that data broker Exactis had exposed a database of close to 340 million records on a publicly accessible server, including contact details and personal profiling data.by seedSource

title2026-09-25

empty to Marketing firm leaves database of 340 million records exposed onlineby seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Exactis