{"id":25463,"date":"2024-11-14T15:10:15","date_gmt":"2024-11-14T23:10:15","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2024\/11\/14\/news-19193\/"},"modified":"2024-11-14T15:10:15","modified_gmt":"2024-11-14T23:10:15","slug":"news-19193","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2024\/11\/14\/news-19193\/","title":{"rendered":"122 million people&#8217;s business contact info leaked by data broker"},"content":{"rendered":"\n<p>A data broker has confirmed a business contact information database containing 132.8 million records has been leaked online.<\/p>\n<p>In February, 2024, a cybercriminal offered the records for sale on a data breach forum claiming the information came from pureincubation[.]com.<\/p>\n<figure class=\"wp-block-image aligncenter size-large\"><img decoding=\"async\" loading=\"lazy\" width=\"1255\" height=\"759\" src=\"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2024\/11\/KryptonZombie.jpg?w=1024\" alt=\"Post on BreachForums from February\" class=\"wp-image-121458\" \/><figcaption class=\"wp-element-caption\">Cybercriminal offering to sell Pure Incubation data<\/figcaption><\/figure>\n<p>Pure Incubation was founded in 2012, and the company later rebranded to DemandScience. DemandScience <a href=\"https:\/\/www.globenewswire.com\/news-release\/2024\/09\/03\/2939749\/0\/en\/DemandScience-One-of-Only-107-Companies-in-History-to-Be-Named-to-the-Inc-5000-Eleven-Times.html\">describes itself<\/a> as &#8220;a leading global B2B demand generation company accelerating global growth for clients.&#8221;<\/p>\n<p>DemandScience says it specializes in lead generation, content marketing, and software development offering data intelligence and marketing solutions for B2B organizations. That&#8217;s a mouthful to describe a <a href=\"https:\/\/www.malwarebytes.com\/cybersecurity\/basics\/data-brokers\">data broker<\/a> that specializes in selling aggregated public data that other companies can use in their marketing campaigns.<\/p>\n<p>When contacted by <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/leaked-info-of-122-million-linked-to-b2b-data-aggregator-breach\/\">BleepingComputer<\/a> about the leak, DemandScience responded by email:<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>&#8220;Regarding the matter referenced in your email, we have conducted a thorough internal investigation and conclude that none of our current operational systems were exploited. We also conclude that the leaked data originated from a system that has been decommissioned for approximately two years.&#8221;<\/p>\n<\/blockquote>\n<p>It might not be a current system, but a third-party count of the data still showed around 122 million unique business email addresses. Although at some point when we all have switched jobs, it will become worthless. Maybe that\u2019s why the cybercriminals offered to sell for $6,000.<\/p>\n<p>That the company left a decommissioned system online for a criminal to find and plunder should be grounds for a hefty fine.<\/p>\n<p>Despite DemandScience playing it down, the data is valuable. How else is it making money by gathering it from public records?<\/p>\n<h2 class=\"wp-block-heading\" id=\"h-what-can-you-do\">What can you do?<\/h2>\n<p>Any business that meets the definition of data broker must register with the California Privacy Protection Agency (CPPA) annually. The CPPA defines data brokers as businesses that consumers don\u2019t directly interact with, but that buy and sell information about consumers from and to other businesses.<\/p>\n<p>This is good news, because it offers Californians a sort of opt-out opportunity, by filling out this form: <a href=\"https:\/\/demandscience.com\/privacy-policy-ccpa\/\">https:\/\/demandscience.com\/privacy-policy-ccpa\/<\/a><\/p>\n<p>You can check whether your email address was included in this data breach by using Malwarebytes\u2019 free Digital Footprint scan. Fill in the email address you\u2019re curious about and we\u2019ll give you a free report.<\/p>\n<div class=\"wp-block-malware-bytes-button mb-button\" id=\"mb-button-7ba16f0b-04e8-4679-9512-2f21a0971dcf\">\n<div class=\"mb-button__row u-justify-content-center\">\n<div class=\"mb-button__item mb-button-item-0\">\n<p class=\"btn-main\"><a href=\"https:\/\/www.malwarebytes.com\/digital-footprint?utm_source=blog&amp;utm_medium=social&amp;utm_campaign=b2c_pro_acq_fy25dfplaunch_171269600960&amp;utm_content=V1\"><\/a><a href=\"https:\/\/www.malwarebytes.com\/digital-footprint\">SCAN NOW<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<p>This leak also shows how important it can be to have your data removed from data brokers sites like these.\u00a0To help you, Malwarebytes offers a <a href=\"https:\/\/www.malwarebytes.com\/personal-data-remover\">Personal Data Remover service<\/a> (US only) that can delete your information from search results, spam lists, people search sites, data brokers, and more.<\/p>\n<p><a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2024\/11\/122-million-peoples-business-contact-info-leaked-by-data-broker\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> A data broker has confirmed a business contact information database containing 132.8 million records has been leaked online. <\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[32135,32136,32,5897,32137],"class_list":["post-25463","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-demandscience","tag-dfata-broker","tag-news","tag-privacy","tag-pure-incubation"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/25463","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=25463"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/25463\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=25463"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=25463"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=25463"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}