computer keyboard

With 4.1 Billion Records Exposed in Six Months, 2019 Is On Course To Be Record Year For Data Breaches

Only eight breaches were responsible for the exposure of 3.2 billion records in the first half of the year, according to new research.

In the first six months of 2019, 4.1 billion compromised records were exposed in more than 3,800 publicly disclosed breaches, according to a new study published by Risk Based Security, a security research firm.

While security breaches have been in the headlines all year long, a large majority of the records ⁠— 3.2 billion ⁠— were revealed in just eight breaches. The largest of those breaches involved, a company that approves email addresses for third-party customers. That breach of nearly a billion names, email addresses and other personal information was due to an unsecured database that was openly accessible online, 24/7 Wall Street reported.

The second largest breach also involved a massive 885 million real estate transaction records, which were maintained by First American Financial. Cultura Colectiva, a Mexico-based digital media company, exposed 540 million Facebook users’ data through a misconfigured database in the third-largest leak.

Based on the number of records leaked, all three were among the top 10 breaches of all time, 24/7 Wall Street reported.

But while Risk Based Security analyzed the largest breaches, it also found that a large majority of breaches reported in early 2019 had a “moderate to low severity score,” meaning they exposed 10,000 or fewer records. As Forbes notes, this is because small businesses are often easy targets for hackers due to their lack of cybersecurity protections for their data.

“Quarter after quarter the pattern has repeated itself,” said Inga Goddijn, executive vice president at Risk Based Security. “The vast majority of incidents are attributable to malicious actors outside an organization. Unauthorized access of systems or services, skimmers and exposure of sensitive data on the Internet have been the top three breach types since January of 2018.”

The business sector was responsible for 67 percent of the reported breaches and nearly 85 percent of the exposed records, the firm found. And while only 149 of the 3,813 incidents involved misconfigured databases and services, those breaches exposed over 3.2 billion records. Indeed, just this week, a security researcher discovered that MoviePass, the movie ticket subscription service, exposed customer credit card numbers by not protecting a crucial database with a password.

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.


  • Until We Meet Again

    A short three years ago we were all pondering whether to attend any tradeshows all thanks to COVID-19. Sorry to bring that nightmare up again, but it seems that little pandemic is in the rear-view mirror, and it’s time to meet again. Read Now

    • ISC West
  • Cyber Hygiene: What it Looks Like for IoT Devices

    Cyber Hygiene: What it Looks Like for IoT Devices

    For our second pillar about the Industrial Internet of Things (IIoT) Pillars of Security, we are going to discuss what cyber hygiene looks like for IoT devices. Read Now

  • ISC West Announces 2023 Keynote Series Speaker Lineup

    The International Security Conference (ISC), in collaboration with premier sponsor Security Industry Association (SIA), announced five of this year’s ISC West Keynote Series speakers. ISC West will kick off its annual conference on March 28 (SIA Education@ISC: March 28-30 | Exhibit Hall: March 29-31) at the Venetian Expo in Las Vegas, Nevada. Read Now

    • ISC West
  • Accelerating Security Modernization

    In recent years, the term “digital transformation” has been one of the most frequently used buzzwords across industries. On its most basic level, it refers to the reimagining of how an organization leverages its technology systems to improve business processes. Read Now

Featured Cybersecurity

New Products

  • Dinkle DKU Barrier Terminal Blocks

    Dinkle DKU Barrier Terminal Blocks

    New DKU screw type terminal blocks use a spring-guided system where the screws are integrated and captive within the terminal enclosure. These screws can be backed out so that ring- or U-shaped cable lugs can be inserted, without the possibility of losing the screw. 3

  • Pivot3 Surety

    Pivot3 Surety

    Pivot3 has announced Surety, a new intelligent software framework to simplify the management and monitoring of physical security environments. 3

  • Paxton10 CORE Cameras

    Paxton10 CORE Cameras

    The new CORE Series cameras feature edge processing for ultimate scalability, built-in edge storage, and plug-and-play installation. The addition of the CORE Series gives installers new hardware, better choice, and more value than ever before. 3