A phone carrier's customer file was posted in public, and the file included home addresses of people already marked as stalking and abuse targets.
The dump did not come from a person knocking on doors. It came from the company that already had to know where those customers lived in order to deliver service. Names, numbers, and residential addresses sat in the same rows. Reporting on the leak noted entries for people being stalked by a former partner and other entries tied to domestic abuse. Those people had given an address to a carrier because a working line requires one. That operational requirement became a published list.
Once a home address is paired with a live phone number, the person on the other side of a grievance does not need to search county records or buy a people search report. They can match the number they already have to the address that just appeared. The physical approach becomes a routing problem, not a research problem.
For a small business owner, the carrier file is rarely the only copy of that pair. The same address sits on the utility account, the domain contact, the merchant processor, and the formation document. A leak in any one of those systems republishes the home. The owner cannot refuse to give the carrier an address and still keep the line. Compliance and exposure are the same transaction.
The people named in that file did not publish their locations. The company that billed them did, after someone else took the file. The result for anyone on that list who already had a pursuer is a home that is no longer hard to find.
A small business owner who assumes a phone account is only a phone account is assuming the billing address will stay inside the company that collected it. This leak showed that assumption does not hold.
There is no good reason to leave your personal life tied to your business. The RuleDraft Small Business Isolation Manual helps Small Business Owners identify those connections and shows them how to reduce them before someone else takes advantage of them.