Is Your Email in the BourseDesVols Data Breach? 571,369 Records

HEROIC analysts logged a database record set tied to BourseDesVols, dated January 12, 2021, that holds 571,369 records. The record lists email addresses, first names, last names and phone numbers. The only way to learn whether your details are inside is to check your email.

A Name and a Phone Number Make a Scam Sound Personal

A message that opens with your own first name and reaches your own phone number sounds as if it comes from someone who knows you. This record supplies all four pieces an impersonator needs to sound that way. No password appears in it, so the danger lies in persuasion: a caller or sender who quotes your details can talk you into handing over more.

The Four Details Attached to Each Email

• Email address, the inbox a phishing message would be sent to.
• First name, the detail that lets a message open as if from a familiar sender.
• Last name, which completes a full name an impersonator can quote back to you.
• Phone number, the line a scam call or text would reach.

Where Impersonation and Fraud Attempts Start

With a full name, an email address and a phone number in hand, a fraudster can write emails that greet you by name, send texts that mention you, or call and pose as a bank, a delivery firm or an official body. Those attempts aim at payment details, password resets or a callback to a number the sender controls. Because the record holds no password, the consequences are identity impersonation and fraud attempts rather than a login opened directly.

How Records Leave a Company's Own Systems

A data breach of this kind means records were copied out of one service's own systems, rather than collected from individual devices. The copy takes a whole table of people at once, which is how a single file can hold 571,369 entries. Once copied, the file is a plain list that anyone holding it can search by email address.

Is Your Phone Number on This List?

To find out, scan your email and see your information. If your address matches, watch for scam calls and texts that use your name, add a PIN with your phone carrier, and treat unexpected messages that quote your details with suspicion. Your personal inbox and your work inbox both deserve the check.