The now-defunct B2B marketing leads provider LimeLeads left an Elasticsearch server exposed without protection in 2019, spilling tens of millions of corporate contact records. The dataset includes 17.8 million unique email addresses alongside phone numbers, employers, job titles and geographic details such as city, state and postcode.
While this is contact data rather than credentials, the combination of verified corporate emails, roles and organizations is a valuable resource for attackers building targeted phishing and business email compromise campaigns. Knowing a user’s job title and employer makes pretext-based attacks against identity systems far more convincing.
What to take away: exposed corporate directory-style data fuels social engineering against your workforce. Reinforce phishing-resistant MFA, watch for spoofed or lookalike sender activity, and remind high-value staff (executives, finance, IT admins) that their public work profiles make them prime targets.