VULNpocalypse
InformationalBreach / campaignMonitoring

SOCRadar post mentions a ZoomInfo sale; details not confirmed

SOCRadar reports a ZoomInfo sale in a dark web roundup headline; no details are confirmed, so check vendor notices and keep monitoring.

Published
Exploitation
Not confirmed. The available source gives no evidence of exploitation or of a confirmed breach.

What happened

According to SOCRadar, a blog post dated 2026-11-09 is titled “Canadian Webmail Access, US Bank Dump, Peru Leak, Spencer’s Breach, and ZoomInfo Sale” (SOCRadar). The headline names a “ZoomInfo Sale” as one item in a roundup of dark web findings. That headline is the only usable detail in the material we received, because the rest of the captured page is site navigation text.

The following is not confirmed:

  • What is being sold, who is selling it, and where.
  • Whether the data is genuine or comes from ZoomInfo systems.
  • How much data is involved, and what it contains.
  • Whether ZoomInfo has acknowledged or investigated anything.
  • Whether any vulnerability, entry point or attacker is involved.

No other outlet in our data carries this story, and there is no statement from ZoomInfo.

Am I affected?

Not confirmed. The source does not say which data, customers or products are involved, so no one can be named as affected or unaffected. Treat this as relevant only if your organization uses ZoomInfo or if your staff or contact records may be held in it.

What to do now

  1. Read the full SOCRadar post to see what it actually claims about the ZoomInfo item: SOCRadar.
  2. Watch ZoomInfo’s official channels for any statement or customer notice. None appears in our sources.
  3. If you are a ZoomInfo customer, ask your account contact whether the company is aware of the claim.
  4. Do not rotate credentials or notify third parties on the basis of this headline alone. Revisit this once there is a confirmed detail.

We will update this advisory if the claim gains details or confirmation.

Sources