[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1sr8846byoxo":3,"$f1tzqockd3zmxl":56},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":7,"domain":9,"breachDate":10,"addedDate":11,"publishedAt":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":16,"affectedCount":16,"affectedCountStatus":17,"affectedCountLowerBound":18,"affectedCountUnit":19,"hasEnglishDescription":4,"contentLocale":20,"availableLocales":21,"translations":31,"severity":42,"dataClasses":43,"description":47,"seoTitle":48,"seoDescription":49,"logoUrl":50,"isVerified":4,"isSensitive":51,"isSpamList":51,"isMalware":51,"company":52},"6a452308a20f867c8ba8e75f","zenbusiness","ZenBusiness 2026年数据泄露事件","zenbusiness.com","2026-03-27T00:00:00.000Z","2026-05-02T05:53:38.000Z","2026-10-09T20:57:02.412Z","Third party breach","",[],5118184,"known",null,"unknown","zh",[22,23,20,24,25,26,27,28,29,30],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":32,"tr":33,"zh":34,"hi":35,"es":36,"ar":37,"fr":38,"bn":39,"pt":40,"ru":41},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},"Critical",[44,45,46],"Email addresses","Names","Phone numbers","\u003Cp>ZenBusiness 数据泄露事件发生于2026年3月，是一起高风险的企业服务数据泄露事件。与企业设立和合规服务相关的客户数据遭到暴露，涉及约5,118,184个不同的电子邮箱地址。由于该记录包含企业设立、法律合规及客户沟通等背景信息，风险并不限于垃圾邮件。姓名、电子邮箱和电话号码一并暴露，可能让伪造的企业续期通知、税务通知、合规文件或冒充客服的诈骗更具迷惑性。\u003C\u002Fp> \u003Ch2>泄露的数据类型与风险\u003C\u002Fh2> \u003Cp>该记录中已核实的数据字段包括电子邮箱地址、完整姓名和电话号码。密码、实际地址、支付卡、税号、公司文件或身份证件不属于已核实的数据类别，因此未列入本次披露。尽管存在这一范围限制，企业主和公司代表的联系信息泄露仍值得重视，因为攻击者可能利用其公司职务和所使用服务的背景，编写有针对性的社会工程诈骗消息。\u003C\u002Fp> \u003Ch2>企业设立与合规背景\u003C\u002Fh2> \u003Cp>ZenBusiness 用户面临的主要风险是冒充官方的业务办理及服务续期通知。攻击者可能以企业设立、年度报告、合规跟踪、注册续期、付款通知或支持请求等为由，诱导用户点击链接或提供更多信息。消息中出现真实姓名、电子邮箱或电话号码，并不能证明其可信。用户在采取任何行动前，应直接访问官方网站，或通过已知的客服渠道核实。\u003C\u002Fp> \u003Ch2>利用电话号码和姓名实施的商业欺诈\u003C\u002Fh2> \u003Cp>由于该记录不包含密码，与密码泄露相比，直接导致账户被接管的风险较为有限；不过，同一电子邮箱地址可能已在其他数据泄露事件中与某个密码关联。企业主应使用高强度且不重复的密码，保护电子邮箱账户、会计工具、域名注册、支付服务和客户管理账户。同时，应启用双因素认证，结束无法识别的会话，并更新账户恢复信息。\u003C\u002Fp> \u003Ch2>已核实的范围与限制\u003C\u002Fh2> \u003Cp>由于记录中包含电话号码，也应考虑诈骗电话和短信的风险。对于自称来自官方机构、注册续期服务机构或支付服务商的人索要验证码、付款、密码或文件的请求，用户应保持警惕。如果企业信息可能已公开，攻击者就可以将真实公司名称与个人联系信息结合起来施压。对于制造紧迫感，或以处罚、关停相威胁的消息，在通过官方渠道核实之前，不应按其要求采取行动。\u003C\u002Fp> \u003Ch2>机构应吸取的安全教训\u003C\u002Fh2> \u003Cp>机构和小企业在 ZenBusiness 的注册情况表明，与外部服务商共享的联系信息可能被用于诈骗活动。企业主应检查会计、银行、域名、电子邮箱及官方注册账户的访问权限。应指导员工如何核验以企业设立或合规文件为主题的虚假请求。客服团队也应做好准备，应对泄露后可能增多的冒充代表和虚假付款请求。\u003C\u002Fp> \u003Ch2>必要的防范措施\u003C\u002Fh2> \u003Cp>ZenBusiness 数据泄露记录不包含密码或支付信息，但其企业业务背景使其带来有针对性的社会工程攻击风险。受影响用户应核实官方业务办理通知，警惕通过电子邮件和电话提出的请求，并对与企业相关的关键账户采取强有力的安全措施。最准确的理解是：该记录带来了针对小企业主和创业者的虚假业务办理诈骗风险。\u003C\u002Fp> \u003Cp>企业主在 ZenBusiness 注册时还应注意另一个问题：个人和企业的联系信息往往集中在同一个电子邮箱账户中。如果创业者在银行、域名、会计、支付及官方注册事务中使用同一邮箱地址，虚假的合规通知就可能看起来像真实的业务流程。因此，受影响用户不仅应检查客户账户，还应检查与企业相关的关键服务中的会话和授权用户。权限移交、发票审批和付款请求流程，不应仅依赖某一个人的电子邮件批准。\u003C\u002Fp> \u003Cp>就该记录而言，本描述并未确认存在密码、税号或支付卡数据，因为已核实的数据字段仅限于姓名、电子邮箱和电话号码。尽管如此，这些字段仍能帮助攻击者在企业业务场景中精准锁定目标。用户需要直接核实官方业务办理通知，通过第二个渠道确认电话中收到的付款请求，并为电子邮箱账户启用双因素认证。对小企业而言，最安全的做法是为每一项财务或官方事务请求设置独立的核验步骤。\u003C\u002Fp>","ZenBusiness 2026年数据泄露事件 (5.1 百万 已报告记录数)","ZenBusiness 2026年数据泄露事件. 据报告，涉及5.1 百万条记录。 已报告的数据：电子邮箱地址, 姓名, 电话号码。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Fzenbusiness_com.webp",false,{"name":53,"sector":54,"country":55,"website":9,"websiteArchiveUrl":14,"websiteStatus":14,"websiteCheckedAt":18},"ZenBusiness","Business Services","United States",{"success":4,"breaches":57},[58,66,73,80],{"slug":59,"title":60,"companyName":61,"logoUrl":62,"breachDate":63,"affectedCount":64,"affectedCountStatus":65},"mario-susi-son-2026","Mario Susi & Son 数据泄露：至少175人受影响","Mario Susi & Son, Inc.","\u002Fuploads\u002Flogo\u002Fmario-susi-son.png","2026-06-13T00:00:00.000Z",175,"lower_bound",{"slug":67,"title":68,"companyName":69,"logoUrl":70,"breachDate":71,"affectedCount":72,"affectedCountStatus":17},"fox-rothschild-2026","Fox Rothschild 数据泄露","Fox Rothschild LLP","\u002Fuploads\u002Flogo\u002Ffoxrothschild_com.png","2026-05-21T00:00:00.000Z",54244,{"slug":74,"title":75,"companyName":76,"logoUrl":77,"breachDate":78,"affectedCount":79,"affectedCountStatus":17},"wilmerhale-2026","WilmerHale 2026年数据泄露事件","Wilmer Cutler Pickering Hale and Dorr LLP","\u002Fuploads\u002Flogo\u002Fwilmerhale_com.png","2026-05-08T00:00:00.000Z",4711,{"slug":81,"title":82,"companyName":83,"logoUrl":84,"breachDate":85,"affectedCount":86,"affectedCountStatus":17},"bridgeway-benefit-technologies-2026","Bridgeway Benefit Technologies 数据泄露","Bridgeway Benefit Technologies LLC","\u002Fuploads\u002Flogo\u002Fbridgewaybentech_com.png","2026-03-05T00:00:00.000Z",54838]