This page documents a data breach listing tracked by Breach House. It summarizes the
publicly advertised leak attributed to DBs w MTDT,
including the affected entity, origin and the date the listing was first indexed.
Breach Overview
👤 U.S Environmental Protection Agency EPA.gov 🔺🔺🔺🔺🔺🔺🔺🔺🔺🔺🔺🔺🔺 💠 Date: 2022-2023 🔵 UncompressedWeight: 3.08GB 🔵Description: Approximately between 2022-2023, the U.S. Environmental Protection Agency (EPA.gov) suffered a data breach impacting over 8.5 million users and exposing personal and sensitive information of its customers and contractors. A hacker operating under the pseudonym claimed responsibility and released the EPA's global contact database on a dark web forum. The leaked database contained three zipped files with approximately 500MB of data in CSV formats, holding common fields such as "Zipcodes," "Full names," "Phone numbers," "Email addresses," and "County, City, States," as well as additional fields in each file. Please note that most of the emails are corporate emails. 🔵Contain: Email addresses, Job titles, Names, Phone numbers, Physical addresses | 860.16 MB | forwarded from: 𝕋𝔸𝕄𝔸𝕋𝔸
Dark Web Exposure
Cross-referenced against HaveIBeenRansom's dark-web index of ransomware leaks, breaches & infostealer logs.
0
found in Infostealer logs
0
found in Traditional breaches
0
found in Ransomware leaks
••••••••••••••••••••••••
•••••••••• · ••••••
••• emails
••••••••••••••••••••••••
•••••••••• · ••••••
••• emails
••••••••••••••••••••••••
•••••••••• · ••••••
••• emails
••••••••••••••••••••••••
•••••••••• · ••••••
••• emails
Full exposure is locked
See every breached email, the internal-vs-external split and each leak source behind this breach.
Legal Disclaimer:
This breach record is compiled from publicly advertised leak listings.
Breach.house only records what the operators themselves publish in the
open. We take screenshots of their public pages and keep the proof
material they post there, so that a listing can be verified and its status
tracked over time. We do not purchase data, we do not solicit or encourage
its publication, we do not access any private system, and we do not alter
anything we record. Nothing is offered for download here, and detailed
content is not published on this page or anywhere else on the public site:
access to it is restricted to vetted customers under contract, for
incident response, due diligence and cyber-resilience work.
Breach.house is not affiliated with, and does not act on behalf of, the
operators who publish this material. If you represent an organisation or
individual named here and want a record reviewed or removed, contact us
and we will act on it.