In May 2024, The Post Millennial, a private company based in Canada, was compromised through a social engineering campaign, leading to approximately 57.0M records containing email address, full name, gender, ip address, password, phone number.

Physical address data was exposed, which may increase targeting risk for affected individuals. The presence of password data in the breach increases the risk of credential stuffing attacks on other services.

The incident has been cataloged by both Have I Been Pwned and DataBreach.com. ObscureIQ has independently verified and classified this breach as part of its ongoing threat intelligence operations.