1Cont Data Breach Leaks 969,677 Phone Numbers and Emails

HEROIC analysts identified a breach affecting 1Cont, a business verification service, with records dated February 2026. The exposed file contains 969,677 records pairing email addresses with phone numbers and first names. The only way to know for certain if your information is in this file is to scan your email.

How One Exposed Record Can Lead to the Next

A phone number and email on their own seem minor, but together with a name they form a chain an attacker can pull on. A scam call can reference your real name, a phishing email can reference your phone number, and each successful step makes the next one more convincing.

The Contact Details Pulled From 1Cont's Database

• Email address: gives a direct channel for phishing messages built around business contact details.
• Phone number: opens the door to scam calls and texts aimed at the contact on file.
• First name: adds a personal detail that makes a scam message or call feel more legitimate.

From Contact Details to Real World Fraud

Since this data is tied to business contacts, the risk extends to impersonation attempts aimed at company email accounts or finance departments. A convincing call referencing a real name and number can be the opening move in a larger scam targeting a business rather than just one individual.

How a Business Database Breach Like This Happens

A database breach means the records came directly out of the service's own systems rather than being pieced together from other leaks. Once a database holding contact details for registered businesses is copied, every entry inside it is exposed in a single event.

Is Your Contact Information in the 1Cont File

Take a moment to scan your email and see if your details appear in this exposure. If they do, be cautious of unexpected calls or emails referencing your name or phone number, and avoid confirming any details with a caller you did not contact first. This applies to both personal and work email addresses alike.