River City Media, an operation publicly identified as large-scale spam infrastructure rather than a conventional marketing business, had 1.4 billion records exposed online due to a misconfiguration that left its data publicly accessible. The exposed trove contained nearly 1.4 billion records in total. After removing duplicates, researchers identified roughly 393 million unique email addresses. The data was not collected from willing customers but was assembled as part of a bulk email and affiliate spam operation. The exposed records included email addresses, IP addresses, names, and physical addresses. Most people whose data appeared in this breach likely had no idea River City Media held their information. Because the dataset was already structured for mass outreach, it is well-suited for reuse in spam campaigns, phishing attacks, and identity-linking efforts that combine details across multiple sources. No widely reported regulatory action or consumer notification process followed the exposure. Affected individuals face an elevated and ongoing risk of targeted spam and phishing, particularly because the data is already formatted for high-volume contact abuse. Anyone who suspects their information was included should be alert to unsolicited emails and avoid clicking links in unexpected messages.

Large-scale spam and marketing databases aggregate email addresses, names, contact records, and campaign-linked identifiers across bulk outreach and distribution operations.

River City Media’s public corporate footprint appears to have collapsed after the 2017 exposure. A public company registry entry for River City Media, LLC in Wyoming shows the entity as inactive and dissolved, with a February 15, 2019 dissolution filing.