LimeLeads data breach: what leaked and what to do
LimeLeads (limeleads.com) had a data breach on 2019-08-01 affecting 17,838,396 accounts.
!Personal data leaked
Added to the catalogue 22 Sept 2026.
What leaked
- Email addresses
- Employers
- Geographic locations
- Job titles
- Phone numbers
What happened
In 2019, the now-defunct B2B marketing leads database service LimeLeads suffered a data breach due to an exposed, unsecured Elasticsearch server. The incident exposed tens of millions of records of largely corporate contact data containing 17.8M unique email addresses, along with phone numbers, employers, job titles and geographic locations including state, city and postcode.
Description from Have I Been Pwned, in its words.
What to do
- Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
- If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
- Turn on two-factor sign-in on that service and on your email.
Common questions
What leaked in the LimeLeads breach?
Email addresses, Employers, Geographic locations, Job titles, Phone numbers
When did the LimeLeads breach happen?
The breach date is 2019-08-01; it was added to the public catalogue on 2026-09-22.
What should I do if my staff used this service?
Warn staff about emails, texts and calls quoting the leaked details, and watch for sign-in attempts on the services they use.
Was a staff address in this breach?
Check one address free, no storage. Breach Watch checks every staff address after each new breach.