This file has been downloaded from The Seven Deadly Sins Data Leak Site (DLS).

Victim: International Association of Privacy Professionals (IAPP)
Domain: iapp.org
Retrieved: 2026-09-21

Status: Listed · 72h to contact · not yet notified · full archive pending upload

Exfiltration summary (Metabase → AWS Athena production datalake):
  - Entry: exposed Metabase BI on AWS (ProductionData / iapp-powerbi workgroup)
  - Silver + gold layer export: ~4.76M rows · ~995 MB (~1.1 GB bundle)
  - persons: ~755K records · ~655K unique member/professional emails
  - entitlements: ~879K · memberships and product access
  - exams: ~866K · certification exam status and results
  - orders / order_lines / subscriptions: commerce and renewal history
  - organizations: ~23K corporate and academic members
  - Marketo lead funnel tables: ~111K leads + attribution
  - Metabase application database: dashboards, saved queries, API metadata

Not captured in this pass (IAM / schema limits):
  - curated_db Salesforce contact objects (names, phones, mailing addresses)
  - raw lakehouse event attendee tables (S3 raw bucket denied)

Proof sample: iapp_pii_sample.csv (redacted email extracts + Salesforce IDs)

These files will be published if the victim does not pay a ransom or cooperate
with The Seven Deadly Sins group.

The Seven Deadly Sins