Data Enrichment Records Data Breach

What happened?

In December 2016, more than 200 million "data enrichment profiles" were found for sale on the darknet . The seller claimed the data was sourced from Experian and whilst that claim was rejected by the company, the data itself was found to be legitimate suggesting it may have been sourced from other legitimate locations. In total, there were more than 8 million unique email addresses in the data which also contained a raft of other personal attributes including credit ratings, home ownership status, family structure and other fields described in the story linked to above. The email addresses alone were provided to HIBP.

When did it happen?

The breach date in the public record is December 23, 2016. The record was added to the catalogue on June 8, 2017 and last updated there on June 8, 2017.

What information was reported as exposed?

• Buying preferences
• Charitable donations
• Credit status information
• Dates of birth
• Email addresses
• Family structure
• Financial investments
• Home ownership statuses
• Income levels
• Job titles
• Marital statuses
• Names
• Net worths
• Phone numbers
• Physical addresses
• Political donations

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Data Enrichment Records around December 23, 2016. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.