Apollo Data Breach

What happened?

In July 2018, the sales engagement startup Apollo left a database containing billions of data points publicly exposed without a password . The data was discovered by security researcher Vinny Troia who subsequently sent a subset of the data containing 126 million unique email addresses to Have I Been Pwned. The data left exposed by Apollo was used in their "revenue acceleration platform" and included personal information such as names and email addresses as well as professional information including places of employment, the roles people hold and where they're located. Apollo stressed that the exposed data did not include sensitive information such as passwords, social security numbers or financial data. The Apollo website has a contact form for those looking to get in touch with the organisation.

When did it happen?

The breach date in the public record is July 23, 2018. The record was added to the catalogue on October 5, 2018 and last updated there on October 23, 2018.

What information was reported as exposed?

• Email addresses
• Employers
• Geographic locations
• Job titles
• Names
• Phone numbers
• Salutations
• Social media profiles

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Apollo or used apollo.io around July 23, 2018. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.