The DemandScience breach

A lot of people would have received the notification from haveibeenpwned last night regarding the DemandScience data breach. To explain this in simple terms, Demand Science is an aggregator, meaning, it just scrapes publicly available information such as LinkedIn, website data, google etc to obtain professional info like email addresses, names, job titles etc. Same as if you went out and searched the details yourself. The guts of it is, that people don't sign up to any sites or services when it comes to aggregators, they just collect data themselves. 

No passwords are associated with this breach so you only need to be aware that (yet again) your email address(s) might be exposed, which increases the chance of phishing attacks.

Troy has a good writeup here: Troy Hunt: Inside the DemandScience by Pure Incubation Data Breach

#databreach #demandscience #danweis #nexon #hackproofyourself #databreaches #troyhunt