← Apollo.io

2018 Unsecured database — 125M contacts, 9B data points

2018 125.0M records affected Share on X

Data compromised

Names, email addresses, job titles, employers, company contact information, social media handles, phone numbers

Technical writeup

Security researcher Vinny Troia discovered Apollo.io's database containing 212 million contact listings was freely accessible online. The unsecured database exposed approximately 125 million email addresses and nine billion data points related to contacts and companies. The exposure occurred during/after system upgrades in July 2018.

Root cause

Unsecured database exposed to the internet; poor security configuration

References