Millions of American records that were left unprotected online were found by security researcher Vinny Troia as he was assessing the security of Elasticsearch installs that were made public.
Credit card numbers and Social Security numbers don't appear to be in the breach. It does include very specific information about every name, such as phone numbers, home addresses, email addresses, and other very private details.
The company collected consumer data on 218 million people and 110 million households, according to the Exactis website.
There are 88 million records in the repository with postal and email addresses, and 112 million records with home phone numbers.
Source: https://securityaffairs.com/74041/data-breach/exactis-data-breach.html
"id": "EXA1636311223",
"linkid": "exactis-llc",
"type": "Data Leak",
"date": "07/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"