Fractal Data Breach Exposes Millions of User Records in 2021

In May 2021, Fractal, known for its work in artificial intelligence and analytics, experienced a significant data breach affecting its Customer Genomics sector. The incident stemmed from unauthorized access to an exposed server, allowing attackers to get their hands on highly sensitive information linked to over 12.5 million individuals and organizations. Among the compromised data were company details, email addresses, first and last names, phone numbers, usernames, and hashed passwords. This breach not only put personal information at risk but also brought to light the stakes for companies handling large-scale analytics and customer profiling.

What Was Breached?

The exposed server contained a range of personal and company-specific data. The compromised database included company affiliations, user email addresses, first and last names, contact phone numbers, usernames, and hashed passwords. The inclusion of both direct contact information and login credentials made this breach particularly notable within the AI and analytics space, where trust and security are paramount.

How Many People Were Impacted?

In total, the breach affected 12,522,057 records. The dataset represents a mix of individual user profiles and company representatives linked to Fractal's Customer Genomics operations. While it's not uncommon for data in analytics to be extensive, the scale of this event and the sensitivity of information involved brought major attention to the breach.

Timeline of Events

The breach occurred in early May 2021. Attackers gained unauthorized access to a server that was left exposed to the internet, ultimately resulting in the compromise of millions of records. After the initial intrusion, the dataset was made public on various forums, drawing additional scrutiny from the cybersecurity community. News of the breach rapidly circulated as details about the scope and the types of data involved became clear in the weeks following the incident.

What Led to the Breach?

The root cause was an unprotected server, which allowed attackers to access customer and company data linked to Fractal’s Customer Genomics operations. There was no public evidence suggesting the involvement of a specific hacking group. Instead, the breach appears to have been opportunistic, exploiting misconfigured security controls around sensitive data infrastructure.

Frequently Asked Questions

What data was exposed in the Fractal May 2021 breach?

The Fractal breach compromised company names, email addresses, first names, last names, phone numbers, usernames, and hashed passwords connected with the Customer Genomics sector.

How many users were impacted by the Fractal breach?

Over 12.5 million user records were affected by this incident, making it one of the largest known exposures in Fractal’s history.

When did the Fractal breach happen?

The unauthorized access and subsequent data exposure took place in early May 2021.

What was the cause of the Fractal Customer Genomics data leak?

The breach was the result of an exposed server that lacked proper security controls, granting unauthorized access to sensitive customer and company data.

How can I check if I'm in the Fractal breach?

You can check if your information was part of the Fractal breach by utilizing the DeHashed search engine.