INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Democratic Organization Leaked Six Million Email Addresses to Unknown Parties

| 2025-07-26 03:27 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
In July 2019, a misconfigured Amazon S3 storage bucket belonging to the Democratic Senatorial Campaign Committee (DSCC) was discovered by UpGuard researchers. The bucket contained approximately 6.2 million email addresses from major email providers, universities, government agencies, and the military, which were uploaded in 2010 by an employee of the DSCC. The leaked data included a list of people who had opted out or should be excluded from marketing emails, with the file name "[IOC HIDDEN • LOGIN REQUIRED]" suggesting a connection to Hillary Clinton's earlier runs for Senator of New York. The attack worked through the misconfigured bucket, which was accessible to anyone with a free AWS account, allowing malicious actors to access and exploit the sensitive data. As of July 26th, 2019, the bucket had been secured by the DSCC after being notified by UpGuard.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Technical Observables Login Required
Indicators of Compromise (IoCs) Protected

Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.

Sign In to View 4 IoCs Create Free Account
sb•••••.net
be•••••.net
Em•••••.zip
Em•••••.csv
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Campaign CommitteeCampaign Committee
Target & Sectors
NORTH_AMERICA NORTH_AMERICA educationeducation governmentgovernment
Incident Timeline
‎July 25th, 2019
A Democratic Senatorial Campaign Committee email list containing over 6 million addresses was leaked in a 145MB .csv file.
data_breach 145 file
Over 6 Million Email Addresses The 145MB .csv file contained over 6,235,397 lines, each of which was an email address.
‎2025/07/26
Threat actors exploited a misconfigured Amazon S3 storage bucket belonging to the Democratic Senatorial Campaign Committee, exposing approximately 6.2 million email addresses from major providers and various organizations.
infrastructure 492 distinct .edu email domains
…92,875 verizon.net 82,594 bellsouth.net 65,351 Analysis also showed a long tail of thousands of other, less commonly used email domains, including email domains associated with businesses and 492 distinct .edu email domains.
Tactical Metrics
Metrics
infrastructure
492
Distinct .Edu Email Domains
…92,875 verizon.net 82,594 bellsouth.net 65,351 Analysis also showed a long tail of thousands of other, less commonly used email domains, including email domains associated with businesses and 492 distinct .edu email domains.
Metrics
data_breach
145
File
Over 6 Million Email Addresses The 145MB .csv file contained over 6,235,397 lines, each of which was an email address.
Intelligence Sources
Upguard 2025-07-26