Category	Adversary Intelligence
Affected Industries	Marketing
Affected Region	USA
Affected Data Fields	Email Address, Name, Password, IP, Address

 

Discovery of the Leak

CloudSEK’s flagship digital risk monitoring platform XVigil discovered a post, on a surface web database marketplace, advertising over 17.5 million records of clearvoicesurveys.com users. It is a market research survey company offering paid services to take real surveys.

The post was published on 22 April 2021. The poster claims to have 17,560,324 user records and 15,060,695 unique email addresses and plaintext passwords. 

 

The Contents of the Leak

The leaked database contains the following data:

• First names, 
• Last names, 
• Home addresses, 
• Email addresses, 
• Phone numbers, 
• IP addresses, 
• Dates of birth, 
• Passwords, etc.

 

Data Verification and Validation 

Apparently the data contains mentions of clearvoicesurvey.com, indicating that they may have been compromised, though the data has not been validated yet. Threat actors who have responded to the thread reiterated that the data belongs to clearvoicesurveys.com.