Data Breach Exposes Records of 114 Million U.S. Citizens, Companies

An unsecured Elasticsearch cluster discovered by HackenProof and indexed by Shodan exposed a roughly 73GB dataset containing over 114 million U.S. citizen and company records (estimated ~83 million people affected), including names, emails, physical addresses, phone numbers, employers, job titles, revenue estimates and IP addresses. The exposure resulted from misconfigured Elasticsearch instances—potentially tied to a data management firm—and although the data is no longer publicly accessible, the duration of exposure and potential prior access create ongoing risk to affected individuals and organizations.