Elasticsearch Instance of Sales Leads on AWS Data Breach

What happened?

In October 2018, security researcher Bob Diachenko identified multiple exposed databases with hundreds of millions of records . One of those datasets was an Elasticsearch instance on AWS containing sales lead data and 5.8M unique email addresses. The data contained information relating to individuals and the companies they worked for including their names, email addresses and company name and contact information. Despite best efforts, it was not possible to identify the owner of the data hence this breach as been titled "Elasticsearch Sales Leads".

When did it happen?

The breach date in the public record is October 29, 2018. The record was added to the catalogue on November 17, 2018 and last updated there on November 18, 2018.

What information was reported as exposed?

• Email addresses
• Employers
• Names
• Physical addresses

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Elasticsearch Instance of Sales Leads on AWS around October 29, 2018. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.