LimeLeads B2B Data Breach 2019
An unsecured and publicly exposed Elasticsearch cluster belonging to B2B sales intelligence and contact broker LimeLeads (limeleads.com) was identified and subsequently leaked across threat intelligence forums in 2019.
Exposed Data Types
6- Email addresses
- Names
- Job titles
- Phone numbers
- Physical addresses
- Employer details
About This Breach
The compromised database repository (split across 40 partitions totaling over 42 GB) comprises approximately 49,433,488 corporate prospect profiles. Compromised data attributes include business and direct personal email addresses, executive full legal names, organizational job titles, direct telephone numbers, company names, physical office locations (city, state, postal code), estimated corporate revenue metrics, and enterprise technology stack profiles.
While account passwords were not exposed in this incident, the rich synthesis of executive identities, direct contact channels, and organizational hierarchy enables highly tailored spear-phishing campaigns, Business Email Compromise (BEC) wire fraud, and supply-chain social engineering attacks.
Corporate organizations and employees are strongly advised to enforce out-of-band verification procedures for wire transfer authorizations or vendor payment adjustments and mandate multi-factor authentication (MFA) across corporate workspaces.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
