iQuantsGraph Data Leaked: 2,836 Accounts Compromised in 2024

HEROIC found the iQuantsGraph Database breach dated April 2024, exposing 2,836 records including email addresses, phone numbers, password hashes, first names, last names, birthdays, and gender data from iQuantsGraph, a US financial services firm whose user database was extracted and distributed on criminal forums.

Why the iQuantsGraph Breach Is Dangerous

Financial firm customer data combined with bcrypt-hashed passwords, birthdays, and full personal identifiers is a high-value target for identity theft and account takeover. Attackers can attempt offline cracking of bcrypt hashes and use the exposed personal details to bypass security questions or impersonate iQuantsGraph customers with financial institutions.

What Was Exposed in the iQuantsGraph Leak

• Email addresses
• Phone numbers
• Password hashes (bcrypt)
• First names
• Last names
• Birthdays
• Gender

Why This iQuantsGraph Data Puts You at Risk

The combination of financial account data with personal identifiers such as birthdays and full names makes iQuantsGraph customers vulnerable to identity theft and financial fraud. Even with bcrypt hashing providing some password protection, the exposed PII can be used to social-engineer financial institutions, attempt account recovery, or conduct targeted phishing campaigns against investment platform users.

How Database Breaches Work

Database breaches occur when attackers gain unauthorized access to a company's data storage systems by exploiting software vulnerabilities, weak access controls, or misconfigured servers. Once inside, they extract user records in bulk and sell or publish the data on criminal forums. Financial services firms are high-value targets because the combination of personal identifiers and account data enables financial fraud and identity theft.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the iQuantsGraph leak or thousands of other breaches in our database.