Elasticsearch Instance of Sales Leads on AWS data breach
From Breaches, in the HARD wiki · Updated
This article is about the October 2018 breach of Elasticsearch Instance of Sales Leads on AWS. For every breach, see Breaches.
The Elasticsearch Instance of Sales Leads on AWS data breach exposed 5,788,169 accounts in October 2018. The data taken includes names, physical addresses, email addresses and employers.[1]
Have I Been Pwned verified it and added it to its search on 17 Nov 2018, 1 month later. It is the 185th largest of the 618 breaches in HARD’s list.
What was exposed
Elasticsearch Instance of Sales Leads on AWS’s breach included 4 kinds of data. What each lets criminals do:
| Data | What it’s used for |
|---|---|
| Names | Makes scam messages personal enough to believe. |
| Physical addresses | Used to prove who you are, and for scam letters and parcels. |
| Email addresses | Expect scam emails that name the company to look genuine. |
| Employers | Personal details that make scam messages more convincing. |
What to do
- Check whether you’re in it.Search your email address on Have I Been Pwned. It tells you which breaches it appears in, Elasticsearch Instance of Sales Leads on AWS among them, without showing the data.
- Distrust messages that mention Elasticsearch Instance of Sales Leads on AWS.Scammers use breach data to sound genuine. Don’t click links in emails or texts about the breach; go to the site yourself.
- Expect the data to resurface.Breach data is sold and combined with other leaks for years. Stay wary of messages that know a little too much about you.
Timeline
- : the breach, as best it can be dated.
- : Have I Been Pwned verifies the data and adds it to its search, 1 month later.
- : the entry was last updated.
Similar breaches
Breaches that leaked the same kinds of data, closest in time:
- Exactis, June 2018, 132 million accounts
- Chegg, April 2018, 40 million accounts
- Ticketfly, May 2018, 26 million accounts
- Wanelo, December 2018, 23 million accounts
- Adapt, November 2018, 9.4 million accounts
- Fashion Nexus, July 2018, 1.3 million accounts
See Breaches for all 618, and Updates for keeping your devices patched.
References
- ^ Troy Hunt. “Elasticsearch Instance of Sales Leads on AWS”, Have I Been Pwned, added 17 Nov 2018. Breach data licensed CC BY 4.0.
External links
- Have I Been Pwned, to check your email address