logo

U.S. Elasticsearch Leak: 676M+ Identity Records & SSNs Exposed

ID: c539a82c-2a9a-52c4-a0f1-3027a0ba26b6

STIX ID: report--c539a82c-2a9a-52c4-a0f1-3027a0ba26b6

Feed Name: SOCRadar Blog

Threat Score
95/100

Date Published: 2026-03-03

Date Updated: 2026-04-30

Author: Ameer Owda

...
...

SOCRadar discovered an unauthenticated Elasticsearch cluster (91.72 GB) publicly exposing ~676,798,866 U.S. identity records that include full Social Security Numbers, dates of birth, addresses, and phone numbers; the report validates sample records, assesses severe identity-fraud risk, and describes intelligence ingestion and coordinated takedown efforts while recommending hardening to prevent similar misconfigurations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.