"The sales intelligence firm firm Apollo sent a notice to its customers last week disclosing a data breach it suffered over the summer. "On discovery, we took immediate steps to remediate our systems and confirmed the issue could not lead to any future unauthorized access," cofounder and CEO Tim Zheng wrote. "We can appreciate that this situation may cause you concern and frustration." In fact, the scale and scope of the breach has a lot of people concerned."
Nice of them to notify their customers, but not the people whose data has been exposed. "Have I Been Pwned" alerted me.
My work contact information has been in the Apollo, Exactis, and NetProspex breaches. I have no idea how my information ever got in these databases. Have I been pwned sent the only notifications I got about these breaches. Does anyone maintain a list of these services I can preemptively get my information removed from?
I may be missing something, but the net effect of this kind of breach is seemingly not that (like the case of a data breach of a "single" company user database) of having "reserved" data (that only the company had and that was given to it with an expectation in good faith by the user to keep it safe) in the hands of someone else, it is more like having data that was already available to anyone for a fee in the hands of someone that didn't pay that fee.
I once ran a social media marketing organization where we were very good about not scraping data outside of the terms and conditions of the networks we interacted with.
In so many of these breaches we're seeing cases where these analytics firms have data scraped from networks that is well in violation of terms - not mistakenly, but wanton disregard for data usage policies of those networks.
With that kind of info you could compute various societal statistics on occupation. Including, for example, being able to see if any large company has minorities underrepresented in higher-level positions.
Nice of them to notify their customers, but not the people whose data has been exposed. "Have I Been Pwned" alerted me.