Breach Disclosure: ClearVoice Surveys

On April 21, 2021, the service ClearVoice Surveys, owned by the organization ClearVoice Research, suffered a data breach. The service specializes in delivering quantitative and qualitative market research data and analysis to healthcare decision-makers. The database was left open as a backup on one of their servers. The leaked database contains first names, last names, home addresses, email addresses, phone numbers, ip addresses, dates of birth, and plaintext passwords.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks.
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance.
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.

Details

A forum thread created under the alias of "pompompurin" was created on the 21st of April 2021, on the well known hacker forum RaidForums. The post details how they obtained the database from an exposed backup, which was quickly removed. The data itself is dated from August 2015, and contains over 15 million unique records.

Figure 1. Post advertising the breached data on a popular hacker forum

The post details the content of the data along with a sample, consisting of the first 20,000 lines of the CSV file containing user data. The content of this CSV file is also being distributed via other channels across dark web sources, and encrypted communication apps.