Data breach
Unknown Data Broker
- Records
- 250,808,966
- Breach date
- 1 January 2021Estimated
- Added
- 1 December 2024
What was exposed
15 types of data · 4 more reported
- Home addresses250,808,966
- Property values250,808,966
- Employment250,808,966
- Salaries250,808,966
- Phone numbers250,807,711
- Names250,785,334
- Credit ratings229,333,772
- Interests170,872,500
- Property type139,077,404
- Bathrooms122,332,539
- Religion101,639,843
- Bedrooms100,594,745
- Year built98,405,038
- Purchase records96,811,045
- Email addresses74,714,740
- Dates of birthReported, not counted
- Marital statusReported, not counted
- GenderReported, not counted
- Political affiliationReported, not counted
Reported in the breach write-up; not counted in the analysed data.
About this breach
In April 2021, a hacker using the online handle Pompompurin published a database containing household and personal records on roughly 250.8 million United States residents, according to reporting by Hackread and Bitdefender. The dump, about 263 GB spread across more than 1,200 CSV files, appeared on the hacking forum RaidForums. The person or company that originally collected the data has never been identified, which is why our investigation team indexes it under "Unknown Data Broker." Hackread reported that the data appears to have come from an open Apache Solr instance hosted on Amazon Web Services, accessed by the hacker before it was removed or reassigned. No company notice was ever issued because no responsible organization has come forward.
Limited public reporting: As of September 25, 2026, the original owner of this database remains unidentified, and no breach notification filing has been publicly tied to this listing in sources reviewed. The facts below rely primarily on the indexed fields plus the secondary sources cited.
April 22, 2021: Pompompurin posted the database of more than 250 million US household records on RaidForums, stating it contained about 59 million unique email addresses and no passwords, according to Hackread and Bitdefender.
April 26, 2021: Hackread published its analysis of the dump, noting the data was already circulating on Russian-speaking forums and Telegram channels.
April 28, 2021: Bitdefender's Hot for Security blog reported on the leak, confirming the dataset's size and contents.
What Information Was Compromised?
Our analysis found the following data types in this breach:
Names for about 250.8 million records, and home addresses at the same scale
Phone numbers for about 250.8 million records
Job and salary information for all indexed records
Home value estimates for all indexed records
Credit range data for about 229.3 million records
Interests for about 170.9 million records
Home type for about 139.1 million records
Number of bathrooms for about 122.3 million records
Religion for about 101.6 million records
Number of bedrooms for about 100.6 million records
Home purchase details for about 96.8 million records
Year the home was built for about 98.4 million records
Email addresses for about 74.7 million records
External reporting on the dump, including Hackread, additionally described dates of birth, marital status, gender, geolocation, political affiliation, and household details such as the number of vehicles, pets, and children.
Not every individual is affected by every type of data listed here.
What Are the Potential Risks for Affected Individuals?
This data is unusually detailed for a leak of this size. It pairs identities and contact details with financial profiles: salary, credit range, and home value. Scammers can use that combination to craft convincing pitches, such as fake mortgage refinance offers aimed at homeowners with specific equity levels.
In the news
- Hackread: Hacker dumps sensitive household records of 250M Americanshackread.com (opens in a new tab)
- Bitdefender: Threat Actor Leaks Personal Records of 250 Million American Households on Hacking Forumbitdefender.com (opens in a new tab)
- ProPublica: Despite Decades of Hacking Attacks, Companies Leave Vast Amounts of Sensitive Data Exposedpropublica.org (opens in a new tab)
