Contact records are datasets that store personal and workplace details such as full names, email addresses, phone numbers, job titles, departments, and sometimes addresses or portal usernames. They are often collected by customer service systems, HR platforms, school portals, and internal support tools.
In cyber security, contact records matter because they are highly useful for social engineering. Attackers can use them to craft convincing phishing emails, impersonate employees or parents, guess organizational roles, and make fraudulent phone calls sound legitimate. Even when the data is not sensitive on its own, it can help build trust and make a malicious message appear routine. Defenders treat these records carefully by limiting access, monitoring for unusual exports, and training staff to verify requests through trusted channels.