Fractal 2021 Data Breach
ObscureIQ Breach Intelligence
Low SeverityWebsite / service breach
Fractal AI & Analytics Company Breach (2021): 12 Million Contact Records Including Phone Numbers Exposed
AI and analytics company
Verified by ObscureIQ Intelligence
23/100Breach Risk Index
5Data Value
25Market Recency
519dSince Breach
Breach Intelligence Summary
Entity: Fractal · Actor: Unknown · Sources: 2 references
Attack: Database Exposure
Profile: Technology Company · AI and analytics services · AI and analytics company · Global
Timeline: Breach (2021-05-01) · Indexed (Feb 04, 2025) · Year (2021)
Exposure: 12.3M records · 3 fields: Email Address, Full Name, Phone Number
Status: Confirmed
Executive Summary
On 30 April 2021, an exposed Apache Cassandra instance linked to Fractal Analytics (its Customer Genomics unit) leaked about 12.26 million records. Exposed data included names, job titles, company names, phone numbers, and email addresses, offered for sale as roughly 12 million unique individual entries.
ObscureIQ assessment: Risk is moderate. The main concern is business-targeted phishing, account compromise, and misuse of corporate contact or customer records. Sensitivity depends on what internal or customer-linked data was exposed, but the service context does not itself imply unusually intimate consumer data.
Breach Impact
The business-contact and professional data supports spear-phishing and business-email-compromise reconnaissance against the individuals listed.
About Fractal
Fractal (Fractal Analytics) is a global artificial-intelligence and analytics services company serving enterprise clients.
Why They Hold Your Data
AI and analytics company handling enterprise-facing data, analytics workflows, and account-based business operations. The likely data context includes employee or customer contact records, business-account data, and operational information tied to analytics services rather than a consumer social platform.
Recent Developments
The exposed data was reportedly sourced from Fractal’s Customer Genomics unit and offered for sale after being found on an open server.
Data Points Exposed
3 verified field types
Email Address
Full Name High
Phone Number
Field names are shown in full for clarity and search visibility. Canonical machine keys are emitted only in this page’s structured data.
Exploitation & Downstream Threats
Threat Activity:Moderate
Primary downstream threats:
- SIM swap attacks where phone numbers are present
- Targeted phishing campaigns using exposed email addresses
Threat vectors:
- Phishing, credential stuffing & account takeover
- Name-based social engineering
- SIM swapping, vishing & SMS phishing
Recommended Actions
If you believe your information may be included:
Enable MFA Everywhere
Turn on multi-factor authentication on email first, then financial accounts.
Report & Recover
If you spot misuse, start an official recovery plan and report fraud.
Frequently Asked Questions
What happened in the Fractal breach?▾
On 30 April 2021, an exposed Apache Cassandra instance linked to Fractal Analytics (its Customer Genomics unit) leaked about 12.26 million records. Exposed data included names, job titles, company names, phone numbers, and email addresses, offered for sale as roughly 12 million unique individual…
What data was exposed?▾
Verified fields include Email Address, Full Name, Phone Number.
What should I do if I was affected?▾
Change reused passwords, enable MFA, and (if identity or financial data is involved) freeze your credit and monitor your accounts.
Sources & References
Every claim on this page is traceable. This breach draws on:
Breach Index
ObscureIQ Intelligence
ObscureIQ proprietary analysis
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation