TruthFinder Consumer Background Check Data Breach
In early 2023, a massive customer database originating from PeopleConnect, the parent company of background check and public records aggregator TruthFinder (truthfinder.com), was exposed across cybercrime repositories.
Exposed Data Types
4- Email addresses
- Names
- Phone numbers
- Passwords
About This Breach
The compromised repository covers user registrations created up to April 2020. Forensic verification establishes 8,101,077 unique canonical email addresses associated with registered accounts. In addition to email addresses, the leak contains customer full names, telephone numbers, account status indicators, and passwords stored as complex scrypt hashes.
While scrypt hashing significantly impedes mass automated password cracking compared to legacy hash algorithms, the exposure of verified emails and phone numbers presents heightened exposure to targeted phishing, credential stuffing, and identity profiling.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
