Search Your Email: The Cyepro Breach Exposed 24,682 Accounts

HEROIC analysts identified the Cyepro data breach on July 29, 2024, exposing 24,682 records from the cloud-based automotive sales platform based in the United States. The compromised data includes email addresses, phone numbers, first and last names, gender, and birthday information belonging to Cyepro customers.

Why This Is Dangerous

With full names, email addresses, phone numbers, birthdays, and gender all exposed together, attackers can craft highly convincing phishing emails, impersonate victims with customer support teams, or bypass knowledge-based authentication questions. Phone numbers enable SIM-swapping attacks that can circumvent two-factor authentication on financial and email accounts. The combination of birthday and name with a valid email address is also sufficient to open fraudulent credit accounts or pass identity verification checks at many institutions.

What Was Exposed

• Email Address
• Phone Number
• First Name
• Last Name
• Gender
• Birthday

Why This Matters

Even without passwords, this dataset is a high-value resource for identity theft and targeted fraud. Attackers routinely combine PII from multiple breaches to build detailed profiles used in account takeover, tax fraud, and social engineering. Victims whose phone numbers are exposed face SIM-swap risk, which can compromise bank accounts and email inboxes. Individuals in the United States are particularly at risk because the exposed fields align directly with information commonly used for identity verification by financial institutions and government services.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a company's stored data by exploiting a vulnerability in a web application, using compromised administrative credentials, or targeting an insecure database exposed directly to the internet. Once inside, attackers copy the contents of customer tables and exfiltrate them. The stolen records are then packaged and distributed on underground forums, where other criminals use them for follow-on attacks. Organizations that store customer PII without proper access controls, encryption at rest, or continuous monitoring are especially vulnerable.

Check If You Are Affected

If you have ever created an account with Cyepro or shared your contact information through their platform, your data may be part of this breach. Use the HEROIC free identity scanner to check your email address against our database of over 400 billion exposed records and find out whether your information has been compromised in this or any other known breach.