Private Contact Details of 23,014 ImportDirect Users Leaked Online

In February 2023, ImportDirect, a Romanian e-commerce platform, had 23,014 customer records leaked in a database breach. The exposed data included email addresses, phone numbers, first names, and last names, making the private contact details of tens of thousands of shoppers accessable to anyone who obtained the dataset. Breaches like this one create lasting risks for affected users long after the initial disclosure.

Why Exposed Contact Details Put You at Risk

When a breach exposes full names, email addresses, and phone numbers together, attackers have everything they need to launch convincing phishing or vishing campaigns. Fraudsters can use this data to impersonate legitimate companies and trick victims into handing over sensitive information or payment details. The combination of occured personal identifiers in this breach makes it partcularly useful for targeted social engineering attacks.

What Was Exposed in the ImportDirect Breach

• Email Address
• Phone Number
• First Name
• Last Name

Why the ImportDirect Breach Still Matters Today

Leaked contact information from e-commerce breaches does not expire. The 23,014 records from ImportDirect may still be bought and sold on underground forums, and the individuals named in this dataset remain targets for spam, fraud, and phishing years after the breach. Anyone who shopped with ImportDirect around February 2023 should remain vigilant about unexpected contact from unknown senders.

How Database Breaches Work

A database breach happens when attackers gain unauthorized access to a server's backend database and extract stored records. Common methods include exploiting software vulnerabilities, using stolen credentials, or taking advantage of misconfigured database access controls. Once attackers pull data from the database, they can package and sell it on dark web markets within hours.

Check If Your Data Was Exposed

HEROIC's breach search engine indexes over 400 billion records from known data breaches, including incidents like the ImportDirect leak. Enter your email address to instantly check whether your personal information has been exposed and learn what steps you can take to protect yourself from ongoing threats.