Borealis Database

The Borealis Database leak occurred in 2018 and released approximately 351,220 records. The database, believed to be from a Russian company, contained a wide range of personal data including names, dates of birth, phone numbers, addresses, and other identifying information.

The leaked data was reportedly used for spamming and phishing purposes. The attackers exploited a vulnerability in the Borealis Databases API, which allowed them to gain unauthorized access to the system. The vulnerability was not publicly disclosed at the time, and it is likely that it was identified and exploited by malicious actors.

The leaked data was initially reported in February 2018, and it is believed that the attack occurred earlier, potentially in late 2017. The Russian company affected by the breach, Borealis, was initially unaware of the attack and was only notified after the leak went public.

The leaked data included information on millions of individuals, including Russian citizens, as well as foreign nationals who had interacted with the companys services. The breach highlights the importance of robust security measures and vulnerability testing, particularly for companies handling sensitive personal data.