Millions affected: Acxiom California breach exposes personal data and more

Millions of people were affected when the Acxiom California breach exposed a sweeping range of personal data including birthdays, phone numbers, and more from 1,586,313 records. Acxiom is a U.S.-based data and technology company specializing in marketing data management, and the scale of this incident reflects just how much information data brokers accumulate on individuals. The leaked dataset is beleived to have surfaced on dark web forums around January 2023, putting affected individuals at ongoing risk of identity fraud.

Why Exposed Birthday and Identity Data Put You at Risk

A dataset that combines full names, birthdates, phone numbers, and email addresses gives criminals nearly everything they need to steal an identity or open fraudulent accounts. Birthdates are partcularly valuable because they are commonly used as verification data by banks, government agencies, and healthcare providers. When this information is combined with an IP address record, it also allows attackers to build a detailed profile of where a victim lives and how they access the internet.

What Was Exposed in the Acxiom California Breach

• Email Address
• Birthday
• IP Address
• Gender
• Phone Number
• First Name
• Last Name

Why the Acxiom California Breach Still Matters Today

Data broker breaches are especially long-lasting in their impact because the information involved is often static and cannot be changed, including birthdates, names, and gender. Unlike a password that can be reset, a birthdate exposed in a breach remains a vulnerability indefinitely. Criminals can use these records to pass identity verification checks, apply for credit, or impersonate victims in ways that are difficult to detect and reverse.

How Database Breaches Work

A database breach occurs when attackers gain unauthorized access to stored records, typically by exploiting vulnerabilities in applications, using stolen credentials, or targeting misconfigured cloud storage. In cases involving data brokers like Acxiom, the breach may expose information that was collected from many different sources over time, amplifying the sensitivity of what is exposed. Once exfiltrated, this data is commonly distributed on underground forums and marketplaces where it reaches a wide criminal audience.

Check If Your Data Was Exposed

HEROIC's breach database spans over 400 billion records and includes major data broker incidents like the Acxiom California breach. Search your email address now to find out whether your personal information was part of this exposure, and use HEROIC's tools to understand the full scope of your data footprint and take action to protect yourself.