Leaked info of 122 million linked to B2B data aggregator breach
The business contact information for 122 million people circulating since February 2024 is now confirmed to have been stolen from a B2B demand generation platform.
Data aggregation is the process of collecting, compiling, and organizing data from public sources to create a comprehensive dataset valuable for digital marketers and advertisers in creating rich "profiles" used to generate leads or marketing information.
In the case of DemandScience, the firm collected business data from public sources and third parties, including full names, physical addresses, email addresses, telephone numbers, job titles and functions, and social media links.
In February 2024, a threat actor named 'KryptonZambie'’ began selling 132.8 million records on BreachForums, claiming they were stolen from an exposed system belonging to Pure Incubation.
At the time, BleepingComputer contacted DemandScience about the allegedly stolen data and was told there was no evidence of a breach. A follow-up email asking if the leaked data samples belonged to DemandScience went unanswered.
