Dark Web Intel: 39K Records From the LBB Little Black Book Breach

HEROIC analysts recieved intelligence in August 2022 pointing to a leaked database from the Indian shopping platform LBB (Little Black Book) circulating on underground forums. The dataset traced back to February 2019 and contained over 3 million records, with 39,259 unique email addresses alongside IP addresses, first names, and last names. The data appeared to have been enriched by a third-party service, combining standard customer records with additional attributes to build detailed user profiles.

Why Enriched Shopping Data Is a Phishing Goldmine

When attackers get their hands on name, email, and IP address combinations, they can craft highly personalized phishing messages that are partcularly difficult for recipients to identify as fraudulent. A message that includes your real name and references your general location carries far more credibility than a generic scam, dramatically increasing the likelihood of a victim clicking a malicious link or handing over credentials.

What Was Exposed in the LBB (Little Black Book) Breach

• Email Address
• IP Address
• First Name
• Last Name

Why Third-Party Data Enrichment Makes This Breach Worse

Even though no passwords were leaked, enriched identity data carries real-world consequences. Attackers use these profiles for spear-phishing, SIM-swap preparation, and account recovery attacks. The combination of name, email, and IP data is accessable to buyers on dark web markets and can be cross-referenced with other breached datasets to build even more complete profiles, raising the risk of identity theft and targeted fraud for affected users.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a structured data store, typically by exploiting misconfigured cloud storage, unpatched software vulnerabilities, or compromised administrative credentials. Once inside, they extract records in bulk. In cases involving third-party enrichment, the stolen data may be more detailed than what the original platform collected, because vendors append additional data points before the breach occurs.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion records to tell you instantly whether your email address appeared in the LBB breach or any other known data leak. Run a free scan at HEROIC to find out what information about you is already out there.