HIGH SEVERITYData Broker

Adapt Data Breach

Adapt.io B2B Contact Database Breach: 153M Professional Records Exposed

B2B contact and company data provider.

Verified by ObscureIQ Intelligence

7.5Severity
153.4MRecords
7Fields
2018Year

ObscureIQ Breach Intelligence Scores
2.5
Breach Risk Index
10
Data Value
25
Market Recency
512
days
Since Breach

Risk Interpretation

Exposure enables spearphishing, executive impersonation, business email compromise, and large-scale prospect targeting. Because the data is already structured for outreach, it is immediately useful for abuse.

🎯 Impact & Downstream Threats

The 2018 breach exposed the risks of the B2B contact-data industry in concentrated form. HIBP says an unprotected database hosted by Adapt exposed more than 9.3 million unique records containing names, employers, job titles, contact details, and employer attributes such as company size and revenue, and it notes that no response was received from Adapt when contacted. That made the dataset immediately useful for phishing, business email compromise pretexting, executive targeting, lead-list enrich

Primary downstream threats:
  • SIM swap attacks where phone numbers are present
  • Targeted phishing campaigns using exposed email addresses
  • Doxxing risk from physical address exposure
  • Employment-based social engineering using job and employer data
  • Social media account targeting and impersonation

🔓 Threat Vectors

Phishing, credential stuffing & account takeover
Business Email Compromise seeding
Name-based social engineering
Vishing & authority impersonation
SIM swapping, vishing & SMS phishing
Physical stalking, mail fraud & identity verification
Account impersonation & social graph harvesting

📋 Breach Intelligence

EntityAdapt
OrganizationPrivate Company • USA
Breach Date2018-11-05
DBC Added2024-12-01
Added Date2024-12-01
Records~153.4M (153,397,220 records)
Attack VectorMisconfiguration
Discovered ByBob Diachenko
Data SubjectsThird_Party
Breach PathwayDirect
SourceHave I Been Pwned / DataBreach.com / ObscureIQ
SensitivityStandard
Breach ID45;46
StatusConfirmed

📝 Executive Summary

Adapt.io, a B2B sales-intelligence company that aggregates and sells business contact data, left a database publicly exposed without any password protection in November 2018. Security researcher Bob Diachenko discovered the unprotected server and found it contained over 9.3 million unique records. Adapt did not respond when contacted about the exposure. The exposed records included names, email addresses, phone numbers, physical addresses, job titles, employer information, social media profiles, and company attributes such as organization size and revenue. Most affected individuals had no direct relationship with Adapt and were likely unaware their information had been collected. Because the data was already structured for sales outreach, it required no further processing to be weaponized. No regulatory action or breach notification has been documented in connection with this incident. For those affected, the structured nature of the data creates lasting risk. Attackers can use it to craft convincing spearphishing emails, impersonate executives, and build detailed profiles for business email compromise schemes. People who receive unexpected or highly personalized business outreach should treat it with caution.

🏢 About Adapt

Adapt.io is a B2B sales-intelligence and lead-data company that provides business contact records, company information, prospecting tools, enrichment services, and API access for sales and marketing teams. Its public-facing product is built around helping users identify decision-makers, verify work contact details, and feed contact intelligence into outbound and revenue workflows.

Data Broker | B2B contact and company data aggregation | Sales intelligence platform and lead data provider | USA
Private CompanyUSAadapt.io

🗂 Why They Hold Your Data

B2B sales intelligence platforms aggregate business contact records, company information, job titles, emails, phone numbers, and employer-linked identifiers for lead generation and outbound sales targeting.

📰 Recent Developments

Adapt remains an active lead-intelligence platform and continues to market a large global contact database, enrichment tooling, browser extension workflows, and Data OS API products for sales teams. Current public materials emphasize verified B2B data, prospecting automation, integrations, and broad international coverage rather than any major shift away from the core brokered-contact model.

🔍 Data Points Exposed

7 verified field types:
Email
Phone Number
Name;Email
Employers
Job titles
Names
Phone numbers
Physical addresses
Social media profiles

Exposure Categories

LocationPHYS ADDR
EmploymentEMPLOYER | JOB INFO

Canonical Fields

email_address, employer, full_name, job_information:job_title, phone_number, physical_address, social_media_profile

🌐 Dark Web Verification

Confirmed
  • Dataset containing ~153.4M records identified in breach intelligence sources
  • Data indexed and searchable across breach notification platforms
  • Source: adapt.io-2018;Adapt Data Breach

🛡 Recommended Actions

⚠️ Do not assume this is low sensitivity.

1Freeze Your Credit
Place a credit freeze with Equifax, Experian, and TransUnion.
2Expect Targeted Phishing
Watch for emails referencing this breach. Verify through official channels.
3Enable MFA Everywhere
Enable multi-factor authentication on all accounts.
4Monitor Accounts
Watch for unauthorized activity on financial and personal accounts.
5Check Your Exposure
ObscureIQ clients: this breach is indexed in your profile.

Protect Yourself

Check If You’re Affected

Enter your email to check if your data appears in this breach.

Get Free Breach Alerts

Be the first to know when new breaches are disclosed.

High-Risk? Get an Exposure Audit

Full-spectrum exposure audits for executives and public figures.

Request Consultation

ObscureIQ Advisory

We combine proprietary dark web access with commercial and restricted breach intelligence to verify exposure and assess real-world risk.

If you are:
  • A public-facing individual
  • A high-profile executive
  • A customer of Adapt
  • Or concerned about credential reuse
Services
AuditsWipesThreat MonitoringTraining

Classification Tags

MisconfigurationData BrokerEmailPhoneAddress

Powered by the ObscureIQ Breach Intelligence Database

© 2026 ObscureIQ · All Rights Reserved · Data Licensing

Latest from ObscureIQ

Credit

What Is Credit Monitoring? And Do I Want It? (Answer: Not Really)

July 14, 2025
Every time there’s a major data breach, companies scramble to offer “free” credit monitoring. It sounds like a responsible move.…
breach economycredit freezecredit scoreequifaxexperian
Credible Threats

Lock Down Browsers. Wipe Employee Footprints. Win Breach Wars.

September 2, 2025
Lock Down Browsers. Wipe Employee Footprints. Win Breach Wars. Over 80% of security incidents now start in the browser. Chrome.…
brave browserbreachesbrowser exploitbrowserschrome
Analysis

Sextortion Spam

May 10, 2025
Sextortion scams aren’t new, but they remain one of the most effective forms of cyber-enabled fraud. These scams don’t rely…
bitcoindeadlinefeargoogle maps apiransom