Cloud Threat Landscape
  • Incidents
  • Actors
  • Techniques
  • Defenses
  • Tools
  • Targeted Technologies
  • Posters & Newspapers
  • About
  • RSS
  • STIX
  • Back to wiz.io

Made with đź’™ by Wiz

Last Updated: April 3, 2025

Cloud Threat Landscape
/Incidents
Incidents
/
Pure Incubation (DemandScience) Breach

Pure Incubation (DemandScience) Breach

Type
Incident
Actors
🧟‍♂️KryptonZambie
Pub. date
February 28, 2024
Initial access
Unknown
Impact
Data exfiltration
References
https://cybelangel.com/pure-incubation-ventures-leak-threat-note/https://foresiet.com/blog/unveiling-the-kryptonzambie-leak-of-pureb2b-co-uk-database
Status
Finalized
Last edited
Jan 14, 2025 5:01 PM

Pure Incubation was founded in 2012, and the company later rebranded to DemandScience.

Back in March 2024, an actor named KryptonZambie posted a thread on Breach Forums selling a database belonging to Pure Incubation.

Furthermore, within their group of businesses, they reportedly have ownership of a company specializing in data-driven, AI-powered solutions for the B2B sector. As a result, the breach compromised millions of pieces of personally identifiable information (PII) gathered by this subsidiary

In the Pure Incubation data breach, two specific tables within the company’s database were compromised, leading to the unauthorized exposure of sensitive information. One of the tables contained details on potential members, while the other stored information on contacts.

These tables held personal and potentially sensitive data, including names, physical addresses, email addresses, job titles, company details, LinkedIn URLs, encrypted passwords, and other identifiers. The breach exposed both current and past records, increasing the risk of social engineering and fraudulent activities for those affected.

image