Skip to content
vindicis

Apollo data breach — are you affected?

In July 2018 the sales-intelligence startup Apollo left a database with billions of data points exposed without a password. A subset covering about 126 million unique email addresses was passed to Have I Been Pwned, with names, employers, job titles, locations, phone numbers and social profiles. It is B2B prospecting data, and the people in it never signed up to the service.

Key facts
Verified
Breach date
23 July 2018
Accounts affected
125,929,660
Added to catalogue
5 October 2018
Website
apollo.io

Data exposed

  • Phone numbers, medium risk
  • Email addresses, lower risk
  • Employers, lower risk
  • Geographic locations, lower risk
  • Job titles, lower risk
  • Names, lower risk
  • Salutations, lower risk
  • Social media profiles, lower risk

Colour shows how damaging the data is if misused.Credentials, ID and bank dataContact and personal detailsOther profile data

What this means for you

Based on the types of data in this breach, in order of importance.

  • Watch for smishing and SIM-swap attempts

    A leaked phone number lets criminals send convincing text messages and try to take over the number. Do not tap links in unexpected SMS, set a PIN with your mobile carrier and prefer an authenticator app to SMS codes.

  • Expect more targeted phishing

    Your email address ties you to this service, which is enough for a believable message such as a fake account warning. Check the sender and the web address before you sign in, and go to the site directly instead of using links in email.

  • Limit what attackers can personalise

    Names, employers, job titles and social profiles make impersonation and spear-phishing easier. Check what your public profiles reveal, and be careful with unexpected requests that use your real name or workplace.

Check your own email address

Run a free self-assessment for an email address you own. VINDICIS checks it against infostealer logs and several public breach sources and shows a summary in seconds.

Built for your own addresses. It is not a tool to look up other people.

Run a free self-assessmentCheck a password

Related breaches

Breaches that exposed similar kinds of data.

Frequently asked questions

Was my data in the Apollo breach?

Only a check of your own address can tell. If you had an account with Apollo around 2018, assume it might be. Run the free self-assessment with an email address you own: VINDICIS checks it against several public breach sources and shows a summary in seconds. It is built for your own addresses, not for looking up other people.

What information was exposed in the Apollo breach?

According to the Have I Been Pwned catalogue, the Apollo breach affected 125,929,660 accounts and exposed: Phone numbers, Email addresses, Employers, Geographic locations, Job titles, Names, Salutations, Social media profiles. The incident dates from 23 July 2018.

What should I do if I had a Apollo account?

Review the security settings of your Apollo account and treat unexpected emails, texts or letters that mention Apollo with suspicion. Delete the account if you no longer use it.

Is it safe to check my email address on VINDICIS?

Yes. The free scan is not stored or logged, results stay in memory for four hours at most, and your browser only talks to this site. The password checker hashes locally and sends only five characters of the hash, so the password never leaves your device.