Inside the FENG Leak: 72,199 CFO-Grade Contacts on the Open Market

HEROIC tracked 72,199 records from The Financial Executives Networking Group (The FENG) surfacing on dark web channels on February 26, 2025, exposing email addresses, phone numbers, first names, last names, and gender data tied to a US-based professional network for senior finance leaders at thefeng.org. The dataset reads like a precision targeting kit for business email compromise crews.

Why This The FENG Database Breach Is Dangerous

The FENG members are CFOs, controllers, treasurers, and finance VPs. A single compromised inbox in this group can authorize wire transfers, override controls, or vouch for a fraudulent vendor. Attackers now have 72,199 verified executive contacts ready for high-conversion spear phishing and impersonation, with no MFA or password rotation able to undo the data already in the wild.

What Was Exposed in The Financial Executives Networking Group (The FENG)

• 72,199 The FENG member records from the networking platform database
• Email addresses tied to senior financial executives
• Phone numbers usable for vishing CFO-style fraud calls
• First and last names plus gender data for tailored impersonation

Why This Matters

BEC fraud routinely costs companies six and seven figures per incident. The FENG dataset is exactly the kind of source attackers buy to upgrade generic phishing into laser-targeted impersonation. Combined with LinkedIn data and SEC filings, attackers can match each leaked email to a real reporting line and craft messages that look indistinguishable from internal finance traffic.

How a Professional Network Database Breach Like This Works

Member networking sites typically run heavy directories with profile, billing, and event integrations. Attackers exploit weak admin authentication, vulnerable plugins, or SQL injection in profile search to extract member tables. The FENG dump shows a uniform record structure consistent with a single, large database export rather than a slow scrape.

Check If You Are Affected

If you are a FENG member or have ever registered for one of its events, search HEROIC's 400B+ record breach database to see if your contact details are in this leak. Confirming exposure means you should brief your finance team, add extra verification for wire requests, and treat unexpected FENG-branded outreach with caution.