Unverified Data Source Data Breach

What happened?

In January 2021, over 11M unique email addresses were discovered by Night Lion Security alongside an extensive amount of personal information including names, physical and IP addresses, phone numbers and dates of birth. Some records also contained social security numbers, driver's license details, personal financial information and health-related data, depending on where the information was sourced from. Initially attributed to Astoria Company, they subsequently investigated the incident and confirmed the data did not originate from their services .

When did it happen?

The breach date in the public record is January 26, 2021. The record was added to the catalogue on March 24, 2021 and last updated there on April 12, 2021.

What information was reported as exposed?

• Bank account numbers
• Credit status information
• Dates of birth
• Email addresses
• Employers
• Health insurance information
• Income levels
• IP addresses
• Names
• Personal health data
• Phone numbers
• Physical addresses
• Smoking habits
• Social security numbers

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Unverified Data Source or used astoriacompany.com around January 26, 2021. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.