2.27 Million Emails Leaked in the Amai AI Platform Breach

HEROIC discovered 2,271,477 records in Amai on 8 January 2025, leaking email addresses tied to the Israeli AI firm's voice and chatbot customer base. Although the dataset itself is limited to email addresses, its sheer size, 2.27 million accounts, makes it a prime feed for phishing campaigns aimed at AI-curious professionals and consumers.

Why This Database Breach Is Dangerous at 2.27 Million Records

This breach is dangerous because volume alone turns even a modest data leak into a powerful targeting list. Attackers can run 2.27 million emails against every previously leaked stealer log to find matching passwords, merge them into combo lists, or launch tailored AI-themed phishing scams that reference Amai by name.

What Was Exposed in Amai

• 2,271,477 Amai customer email addresses
• A verified list of AI platform users based in and around Israel
• Indicators of an Amai product interest for targeted lures
• Enough volume to seed large-scale phishing and spam operations

Why This Matters

A 2.27 million email list is a multiplier. When attackers cross-reference these addresses against older breaches, they uncover matching passwords and personal data, transforming a single email leak into identity theft, account takeovers, and spear phishing against AI industry professionals.

How Database Breaches Work

Database breaches at fast-moving AI startups like Amai often stem from exposed cloud storage buckets, unpatched web apps, or stolen admin credentials from a prior infostealer infection. Once inside, attackers export the user table, stage the data, and post or sell the file on dark web forums and marketplaces that aggregate tech company dumps.

Check If You Are Affected

HEROIC scans more than 400 billion compromised records, including the Amai dataset, so you can see in seconds whether your email appears in this 2.27 million-record breach. Run a free HEROIC scan, watch for suspicious AI or chatbot-themed emails, enable multi-factor authentication on webmail and SaaS accounts, and avoid clicking links in unsolicited Amai messages.