Instant Checkmate 2019 Data Breach
Data Broker · Background checks and people search · People search and background report service · USA
Instant Checkmate People-Search Background Check Service Breach (2019): 20 Million User Accounts Including Passwords Exposed
People search and background check service.
Confirmed · ObscureIQ Intelligence
Breach Risk Index i
41/100
Lower riskHigher risk
Moderate: notable exposure with meaningful misuse potential.
Data Sensitivity i
StandardExposed data is largely lower-sensitivity. Standard identity-protection precautions are advised.
20.2MRecords
2019Year
The Breach Risk Index (BRI) is a proprietary 0–100 score rating how dangerous a breach is right now, based on how recently the data has been circulating on the dark web and how valuable it is to attackers.
Breach Summary
Instant Checkmate, a people-search and background check service operated by PeopleConnect, suffered a data breach traced to a 2019 backup file. The data surfaced on a hacking forum in January 2023. PeopleConnect confirmed the exposed data was authentic and affected customer accounts created between 2011 and 2019. The breach stemmed from a misconfiguration or inadvertent exposure of the backup, with no evidence of a direct intrusion into active systems. Approximately 20.2 million records were compromised. The exposed data included full names, email addresses, phone numbers, and passwords stored as scrypt hashes. While scrypt is a hardened encryption format, cracking remains possible with sufficient resources, meaning passwords should be considered at risk. The breach carries heightened concern given the nature of the platform. Instant Checkmate aggregates detailed personal records on millions of individuals. A breach of its own customer database compounds that risk, exposing the identities and contact details of people who were researching others, in some cases for sensitive personal or professional reasons. PeopleConnect notified affected users and prompted password resets following discovery. No major regulatory enforcement action or settlement specific to this breach has been publicly documented. Affected individuals face real risks including phishing attacks, account takeover attempts on other services where the same password was reused, and potential targeting for stalking or doxxing. Anyone who held an Instant Checkmate account between 2011 and 2019 should treat their credentials as compromised and audit any accounts sharing the same password.
Full threat analysis, exploitation vectors, and principal guidance below.
10 additional sections · verified field analysis · defensive doctrine
Querying breach corpus…
Cross-referencing exposed field types…
Resolving threat-actor attribution…
Compiling principal risk advisory…
20.2M records analyzed
About Instant Checkmate
Instant Checkmate is a consumer-facing people search and background check service that aggregates public records — criminal histories, court filings, addresses, relatives, and contact information — into searchable personal profiles. The platform is operated by PeopleConnect, which also runs the related service TruthFinder. Both are marketed for personal use in researching individuals, though critics have raised concerns about their use in surveillance and stalking contexts.
Why They Hold Your Data
People-search and background-report services aggregate identity, address, phone, criminal-record, relative, and public-record data into searchable consumer profiles.
Recent Developments
Instant Checkmate continues to operate under PeopleConnect alongside TruthFinder. The people search and data broker industry faces ongoing scrutiny under state privacy laws — particularly the California Consumer Privacy Act and similar legislation — requiring opt-out mechanisms and data deletion processes. No major organizational changes have been prominently reported beyond the regulatory environment context.
Data Points Exposed
4 verified field types
Email Address
Full Name
Password High
Phone Number
Breach Impact
In January 2023 a corpus of data from Instant Checkmate and its sister service TruthFinder surfaced on a hacking forum. The dataset originated from 2019 backup files and contained records for approximately 20 million accounts including names, email addresses, phone numbers, and passwords. PeopleConnect acknowledged the breach and confirmed the data was authentic. The company notified affected users and prompted password resets. No major settlement or regulatory enforcement action specific to this breach has been prominently documented, though the exposure of a background check service's own user database — a platform whose purpose is aggregating others' personal information — drew pointed commentary in security and privacy circles.
Exploitation & Downstream Threats
• Credential stuffing against reused passwords across other platforms | • SIM swap attacks where phone numbers are present | • Targeted phishing campaigns using exposed email addresses
Principal Risk Advisory
What this means for a principal
A data-broker/identity breach: aggregated identity attributes re-seed broker networks and enrich targeting of the individual. For a high-profile principal the main risk is credible impersonation and enrichment of existing exposure.
What You Should Do
- Reset any reused passwords and enable MFA on email first, then financial accounts.
- Guard against SIM-swap and vishing: add a carrier port-out PIN and verify any 'support' calls independently.
- Do not use unofficial 'am I affected' lookups; several are themselves harvesting operations.
How ObscureIQ Can Help
- Corpus confirmation: determine whether and where the principal (plus household and staff) appear in this dataset and which specific fields are exposed for them.
- Exposure mapping and footprint neutralization: cross-reference against broker-available data and suppress still-removable elements, prioritizing address and phone, since this record re-seeds broker networks.
- ThreatWatch tuned to this incident's identifiers and misuse pattern (impersonation and targeting patterns, not generic credential monitoring).
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation