Speedio, a Brazilian B2B lead generation platform, suffered a data exposure in December 2024 when a dataset allegedly taken from an unsecured Elasticsearch instance was posted for sale on a hacking forum. The exposed corpus contained over 62 million records, including approximately 27.5 million unique email addresses. The attacker and precise method of access have not been confirmed. Speedio did not respond to disclosure attempts, and the origin of the data could not be independently verified. The exposed data includes company names, email addresses, phone numbers, and physical addresses. Because Speedio aggregates business contact information rather than serving consumers directly, the individuals and companies represented in the dataset were not Speedio customers. They were third parties whose details had been collected and indexed without their direct involvement. This distinction matters: affected people may have no awareness that their business contact information was held by Speedio at all. No formal regulatory action or breach notification has been documented. The practical risk to affected individuals is elevated. The dataset was already structured and normalized for sales outreach, making it immediately useful for spearphishing campaigns, targeted scams, and business impersonation. People whose email addresses or phone numbers appear in the data should be alert to unsolicited contact that references their employer, role, or business relationships.

Business-intelligence and contact-data platforms aggregate company records, executive identities, emails, phone numbers, and firmographic data for sales and research workflows.

Speedio continues to operate as a Brazilian B2B sales intelligence platform. No major organizational changes have been publicly reported.