Rightbiz Data Breach (2023): What Was Exposed & What To Do

In June 2023, personal and contact details linked to tens of thousands of people associated with Rightbiz, described as the UK’s No.1 Business Marketplace, appeared on a popular hacking forum. Public reporting later put the number of unique email addresses at roughly 65,000, alongside names, phone numbers and physical addresses, within a larger dump said to contain more than 18 million rows of data. For anyone who has used the platform to buy, sell or list a business, the practical question is straightforward: whether their contact information is now circulating outside the company’s control and what that means for unwanted contact, impersonation or further misuse.

The incident was reported on 9 July 2023. Rightbiz did not respond to multiple attempts to discuss or confirm the disclosure, according to the available account. Exact technical details of how the data left the organisation remain limited in public reporting.

What happened

According to the reported summary, data belonging to Rightbiz surfaced in June 2023 on a popular hacking forum. The material was described as comprising more than 18 million rows and including about 65,000 unique email addresses together with names, phone numbers and physical addresses. The listing and the appearance of the data on the forum are the basis of the public account; no further confirmed timeline, intrusion method or internal investigation findings have been set out in the facts available here.

Rightbiz was approached more than once about the incident and did not respond. Whether the company has since issued its own statement, notified regulators or contacted affected individuals is not detailed in the material provided. Scale figures beyond the 65,000 unique emails and the “more than 18 million rows” description are not supplied, and no ransom demand, payment or attribution to a named group is recorded in these facts.

How a breach like this happens

Incidents that end with large contact databases appearing on forums often follow familiar patterns, though the precise path in any single case may differ and is not established here. Attackers commonly obtain access through stolen or guessed login credentials, unpatched software, misconfigured cloud storage, compromised third-party suppliers, or phishing that yields administrative access. Once inside, they may copy customer or user tables, export backups, or scrape systems that hold names, emails, phone numbers and addresses.

The data is then sometimes packaged and posted on criminal forums either for sale, for reputation among peers, or as proof of access. Appearance on a forum does not by itself prove every row is accurate or current, but it does mean the material is available to anyone who monitors those channels. Organisations that hold marketplace or directory-style records are frequent targets because the combination of identity and contact fields is useful for spam, fraud and social engineering. None of this assigns a specific method or actor to the Rightbiz matter; it only describes how breaches of this general type typically unfold when public detail is thin.

Rightbiz and its sector

Rightbiz presents itself as a leading UK business marketplace—a platform where people list, browse and transact in the sale or purchase of businesses. Companies in this sector routinely collect and store the kinds of information needed to match buyers and sellers, verify listings and communicate about deals: names, email addresses, phone numbers, postal or business addresses, and often additional commercial details. Even when financial or highly sensitive documents are held separately, the core contact layer is valuable both to legitimate users and to anyone seeking to reach business owners or prospective buyers at scale.

A breach affecting such a marketplace is consequential because the people involved are often small-business owners, brokers or investors whose contact details are tied to real commercial activity. Exposure can lead to targeted approaches that look plausible precisely because they reference business sales or acquisitions. The organisation itself faces operational, regulatory and reputational pressure once user data appears outside its systems, regardless of whether fault has been formally established.

What data was at risk

The facts name the exposed data types as email addresses, names, phone numbers and physical addresses. The dump was also described as containing more than 18 million rows while encompassing about 65,000 unique email addresses. No other categories—such as passwords, financial account numbers, identity documents or private message content—are listed in the available record, and their presence or absence is therefore unconfirmed.

Organisations of this kind typically hold at least the contact fields required to operate a marketplace. Beyond what has been explicitly named, the exact full contents of the dataset remain as reported on the forum and have not been independently itemised in the facts given here. Readers should treat only the named fields as the confirmed scope of what was said to be exposed.

What's at stake

For affected individuals, the main near-term risks are unwanted contact and social engineering. Email addresses and phone numbers enable spam and phishing; names and physical addresses make messages or letters appear more personal and credible. Someone posing as a buyer, seller, broker or support contact could reference a business listing or a plausible marketplace context to extract further information or money. Physical addresses also raise ordinary privacy and safety concerns if they relate to home or small premises.

For Rightbiz, the stakes include loss of user trust, possible regulatory scrutiny under data-protection rules, and the cost of investigation and remediation—none of which is detailed in the public facts. Because the company did not respond to disclosure attempts described in the reporting, affected people may have had little official guidance at the time the data appeared. The absence of a named threat actor or confirmed root cause does not reduce the practical need for caution among those whose details match the named fields.

What to do if you're exposed

If you have used Rightbiz or believe your details may be in the set, treat unsolicited calls, emails or letters that reference business sales with extra care. Verify any request through official channels you already trust rather than links or numbers supplied in the message. Consider monitoring accounts tied to the exposed email, using unique passwords elsewhere, and enabling multi-factor authentication where available. Be alert to identity or address misuse, and report clear fraud attempts to the relevant authorities.

You can also run a free exposure scan of your email to check whether your information has surfaced in known breach data. That step does not undo a leak, but it helps you judge whether this or other incidents have put your address into circulation and where to focus further precautions.

AICompiled with AI assistance from public sources and published under our editorial standards.