Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Breach occurred 2016-12-23What happened
In December 2016, more than 200 million "data enrichment profiles" were found for sale on the darknet. The seller claimed the data was sourced from Experian and whilst that claim was rejected by the company, the data itself was found to be legitimate suggesting it may have been sourced from other legitimate locations. In total, there were more than 8 million unique email addresses in the data which also contained a raft of other personal attributes including credit ratings, home ownership status, family structure and other fields described in the story linked to above. The email addresses alone were provided to HIBP.
Data exposed
Frequently asked questions
The Data Enrichment Records data breach occurred on December 23, 2016. It was added to Have I Been Pwned's breach catalog on June 8, 2017.
8,176,132 accounts were affected by the Data Enrichment Records data breach, according to Have I Been Pwned's records.
The Data Enrichment Records breach exposed the following data types: Buying preferences, Charitable donations, Credit status information, Dates of birth, Email addresses, Family structure, Financial investments, Home ownership statuses, Income levels, Job titles, Marital statuses, Names, Net worths, Phone numbers, Physical addresses, Political donations.
Have I Been Pwned has not independently verified the Data Enrichment Records breach. Unverified breaches can still be genuine — verification just means HIBP hasn't been able to confirm the data's authenticity directly, often because the source is a smaller or less-publicized incident.
Use KazaSec's free Email Breach Checker (/tools/breach-check) to check whether a specific email address has surfaced in the Data Enrichment Records breach, or any other known breach — the tool never stores what you search.
Our free Email Breach Checker tells you whether a specific email address has surfaced in this breach — or any other known breach — without ever storing what you search.
Check your email →Talk to us about this
We help organizations find and fix the gaps that lead to a breach, before they do.