Apollo Data Breach Exposes 98 Million Records in July 2018

In July 2018, Apollo, a sales engagement and lead generation platform, experienced a major data breach that resulted in the exposure of around 98 million user records. The incident unfolded when vast data collections were discovered accessible online without password protection, part of Apollo’s 'revenue acceleration platform' used by businesses for prospecting and sales outreach. The exposed data was broad, covering not just personal information like names, emails, and phone numbers, but also rich professional context—job titles, employers, work URLs, and detailed address data. While sensitive financial information and passwords were not compromised, the leak underscored the risks that arise when large-scale business datasets are left unsecured.

What Happened in the Apollo Data Breach?

The Apollo breach surfaced after a security lapse left restricted data on an open server. This meant that anyone who found the database could access information on millions of professionals without the need for authentication. The data originated from both public and proprietary sources, aggregated by Apollo to power their sales automation tools. The breach did not involve direct hacking, but rather a failure in properly securing a cloud-hosted database.

What Data Was Exposed?

The exposed dataset was extensive, with compromised details including:

• Full name, first and last name
• Email address
• Phone number
• Company name and website URL
• Job titles, employers
• Location information: city, state, country, and zip code

No passwords, social security numbers, or financial data were involved in this incident, according to Apollo’s public statements. Nevertheless, the breadth of professional and personal contact details made this leak especially notable for privacy and potential unsolicited contacts.

How Many Records Were Involved?

Apollo’s breach exposed approximately 98,642,181 records in total. Many entries represented unique individuals and contained in-depth details useful for sales and marketing activities, highlighting the large reach of Apollo’s business data aggregation.

Timeline of the Apollo Breach

• Prior to July 2018: Apollo amassed a wide range of public and proprietary data to assist clients in their sales engagement strategies.
• July 2018: The database was discovered online, accessible without password protection. Security researchers and the public could freely view and download records.
• Following discovery: Apollo took action to secure the exposed instance and notified affected users. The company emphasized that the breach did not include passwords or credit data.

Frequently Asked Questions

What kind of data was leaked in the Apollo breach?

The Apollo leak included full names, email addresses, phone numbers, company names, job titles, company websites, and geographic location—all information used in business and sales prospecting.

How many users were affected by the Apollo data breach?

Roughly 98 million records, tied to both individuals and businesses, were exposed in the Apollo incident.

Was sensitive data like passwords or financial details exposed?

No. Apollo clarified that passwords, social security numbers, and financial information were not part of the compromised dataset.

When exactly did the Apollo breach occur?

The incident was identified in July 2018, when the unsecured database was found online and subsequently reported.

How can I check if I’m in the Apollo breach?

You can check if your information was part of the Apollo breach by utilizing the DeHashed search engine.