QUESTION

I am getting this on the compromise reports:

Elasticsearch server breached containing profile information from People Data Labs (PDL) and OxyData.io

RESOLUTION

There was a breach on an elasticsearch server. You can read more about the breach here and more about what elasticsearch is here. In essence, these sites used an elasticsearch server for their underlying data processing, which was unfortunately breached. Some of the information that was exposed was more of a marketing profile such as name, username, email, etc. There does not seem to be any passwords that were gained from this breach, it was more PII information. No particular site was breached, it was more of this specific server which had PII information for marketing purposes from People Data Labs and OxyData.io. These sites use various ways to gain such data.