B2B USA Businesses Data Breach (2017): What Was Exposed & What To Do

In mid-2017 a large compilation of contact records for individuals working in U.S. companies was found circulating online. The material, labeled B2B USA Businesses, contained professional details for 105.1 million people and was reported on 18 July 2017. The scale of the exposure means that a substantial portion of the corporate workforce had elements of their work-related information placed outside controlled channels.

Breaking down the breach

The incident involved the public appearance of a dataset described as a spam list. It was discovered during the middle of 2017 and contained records for 105.1 million individuals. Each record included an email address linked to an employer, together with the person’s name, job title, work phone number and physical address. No further technical details about the source of the list or the method of its disclosure have been made public.

How a breach like this happens

Collections of this kind frequently originate from the aggregation of publicly available business directories, website scraping, or the combination of earlier smaller leaks. Once assembled, the material can be packaged for marketing use and later surface on open or semi-public servers. Because the data is often treated as a commodity rather than protected personal information, it may remain accessible for extended periods before discovery.

Who is B2B USA Businesses?

B2B USA Businesses refers to a compilation of contact information focused on the U.S. corporate sector. Organizations and lists operating in this space routinely gather professional identifiers to support sales, recruitment and market research. A breach affecting such a resource is consequential because the records directly map individuals to their employers and roles, creating a ready-made directory of working professionals.

What was likely exposed

The published facts list the exposed fields as email addresses, employers, job titles, names, phone numbers and physical addresses. No additional data categories have been confirmed. While organizations that maintain business contact lists commonly hold similar fields, the precise contents of this particular compilation remain limited to the types already named.

Why it matters

Exposure of verified work email addresses and telephone numbers can increase the volume of targeted unsolicited messages and phishing attempts directed at employees. When job titles and employer names are also present, the information can be used to craft more credible approaches that reference an individual’s actual position. For the organization that compiled the list, the incident highlights the difficulty of keeping large aggregated datasets from migrating beyond intended boundaries.

Were you affected?

Individuals can review their own email addresses against public breach records through freely available lookup services. Practical next steps include monitoring work and personal inboxes for unusual activity, verifying that any contact details published online remain necessary, and applying standard account-security measures such as strong unique passwords and multi-factor authentication where available.

AICompiled with AI assistance from public sources and published under our editorial standards.