A threat actor has recently posted allegations of a significant data breach affecting Leadbuyer, a U.S.-based company specializing in the purchase of insurance and mortgage internet leads.
According to the post, the alleged breach involves a database containing approximately 1.3 million records. The threat actor provided a sample of the data, which purportedly includes personal and professional information such as names, business and personal emails, phone numbers, LinkedIn profiles, addresses, income ranges, and job titles. Additionally, the dataset appears to contain company-specific details like revenue, employee count, SIC codes, and industry classifications.
The threat actor is offering the data for sale to the highest bidder, with communication being facilitated via Telegram and Session.
The potential breach, if proven true, could expose millions of records containing sensitive personal and corporate information, leading to possible implications for both Leadbuyer and the individuals and companies whose data may have been compromised.
