2026 Exactis — DarkForums consumer-data repost claim (unverified); 11M alleged
Data compromised
Actor-claimed names, addresses, dates of birth, emails, phone numbers, IP addresses, URL/web-activity fields, and internal classification codes in CSV-style rows (~11M alleged)—samples include legacy timestamps from 2007–2009
Technical writeup
Unverified criminal-forum redistribution — indexed July 5, 2026. DarkForums user Edric posted a Databases thread titled "Exactis.com – Large-Scale Consumer Data 2026 [11m]" advertising roughly 11 million U.S. consumer-marketing records from exactis.com with sample CSV fields (a2, address, dob, email, ip, name, phone, url). Published samples include record dates from 2007–2009, suggesting the bundle may repackage or subset the widely reported June 2018 Exactis marketing-database exposure (~340M records per Wired) rather than a freshly attested 2026 compromise. Exactis had not issued a new breach notice at catalog time. BreachHistory uses the actor-cited 11M figure labeled unverified in title and writeup; see also canonical row exactis2018 for the verified 2018 incident.
Root cause
Unverified DarkForums Databases listing by actor Edric redistributing alleged Exactis.com marketing-consumer records—likely recycled broker data related to the 2018 exposure; Exactis had not confirmed a new 2026 incident at catalog time