Your Business Contacts Are For Sale: The 1Tx.io Breach

HEROIC analysts found that business data aggregation platforms are prime targets for threat actors seeking commercial intelligence at scale, and the 1Tx.io breach is a direct illustration of that risk. On July 1, 2024, a database comprising 20,086 records from the Singapore-based IT services platform 1Tx.io was exposed, containing the names and email addresses of business contacts stored within the platform. For professionals and organizations whose data was held by 1Tx.io, this breach means their contact details are now accessible to any actor willing to purchase or download the dataset from underground sources.

Why This Is Dangerous

Business contact databases are currency for spammers, phishers, and social engineers. A dataset containing verified business email addresses paired with real names enables highly convincing impersonation attacks, vendor fraud schemes, and targeted phishing campaigns. Because this data comes from an IT services platform, many affected contacts are likely professionals in technical or decision-making roles, making them especially valuable targets for business email compromise attacks and corporate espionage.

What Was Exposed

• Email addresses
• First names
• Last names

Why This Matters

Even without passwords, exposed names and verified business email addresses enable credential stuffing preparations, targeted phishing, and identity fraud. Attackers cross-reference leaked business contact data against other breach datasets to enrich profiles, increasing the precision of account takeover attempts. Organizations whose contacts appear in this dataset face elevated risk of fraudulent invoicing, supply chain phishing, and social engineering attacks directed at their employees.

How Database Breaches Work

A database breach occurs when an unauthorized party accesses a backend data store, often through vulnerabilities in web application code, insecure API endpoints, misconfigured cloud storage, or compromised credentials. The attacker extracts records in bulk, often without triggering real-time alerts, and subsequently offers the data for sale or free distribution on dark web forums. Because business platforms frequently aggregate contact data from multiple sources, a single breach can expose the contacts of thousands of companies simultaneously.

Check If You Are Affected

HEROIC offers a free identity scanner powered by a database of more than 400 billion compromised records sourced from breaches across every sector and region. If your email address or the contact details of your employees may have been held by 1Tx.io, run a free scan at heroic.com to determine your exposure and take action to protect your accounts and organization.