Skip to content

Exactis

Disclosed Jun 27, 20188 years ago131,577,763 accountsUnverified

Marketing firm leaves database of 340 million records exposed online

Researcher Vinny Troia found that data broker Exactis had exposed a database of close to 340 million records on a publicly accessible server, including contact details and personal profiling data.

What is known

People affected131,577,763 (accounts in the leaked data, per Have I Been Pwned)
DisclosedJun 27, 2018
HappenedJun 1, 2018
AttackExposed data
Data exposedFinancial, Dates of birth, Education records, Emails, IP addresses, Names, Employment, Phone numbers, Addresses, Other
SectorData brokers · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Exactishaveibeenpwned.com · Aggregator
Marketing Firm Exactis Leaked a Personal Info Database With 340 Million Recordswired.com · News

Notices filed

WhereFiledPeople
ResearchtotalJun 27, 2018
Have I Been Pwnedaccounts in the dataJul 25, 2018131,577,763
History of this record
  • 2026-09-25 · source_type: aggregator to press · seed source
  • 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/Exactis to https://www.wired.com/story/exactis-database-leak-340-million-records/ · seed source
  • 2026-09-25 · country: empty to US · seed source
  • 2026-09-25 · sector: tech to data · seed source
  • 2026-09-25 · attack: lost-device to misconfiguration · seed source
  • 2026-09-25 · data_types: ["financial","dob","education","emails","ip-addresses","names","employment","phone","addresses"] to ["financial","dob","education","emails","ip-addresses","names","employment","phone","addresses","other"] · seed source
  • 2026-09-25 · disclosed: 2018-07-25 to 2018-06-27 · seed source
  • 2026-09-25 · summary: In June 2018, the marketing firm Exactis inadvertently publicly leaked 340 million records of personal data . Security researcher Vinny Troia of Night Lion Security discovered the leak contained multiple terabytes of personal information sp to Researcher Vinny Troia found that data broker Exactis had exposed a database of close to 340 million records on a publicly accessible server, including contact details and personal profiling data. · seed source
  • 2026-09-25 · title: empty to Marketing firm leaves database of 340 million records exposed online · seed source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Exactis

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.