BLACKOUT://VENDOR_INTEL/ZOOMINFO
VENDOR_DBINTEL READY
deanon
ZoomInfo

ZoomInfo

30Hypocrisy
90Revenue Risk

Executive Summary

ZoomInfo (formerly DiscoverOrg) is a publicly-traded B2B intelligence platform headquartered in Vancouver, WA. While marketing as a business data provider, ZoomInfo is officially registered as a California data broker and explicitly sells personal information including names, emails, and phone numbers. Despite claiming SOC2 Type II, ISO 27001, and GDPR/CCPA compliance, BLACKOUT runtime scans detect ZoomInfo on 60 websites with a 26.6% pre-consent firing rate, indicating systematic tracking before user consent. This creates material compliance gap between their certifications and actual runtime behavior.

Revenue Threat Profile

4 COLLAPSE VECTORS

How this vendor creates financial exposure. Each score (0-100) reflects observed runtime behavior and documented business practices.

100

CAC Subsidization

critical

ZoomInfo corrupts measurement by harvesting contact data from email integrations and third-party sources, creating shadow profiles that influence sales targeting without accurate consent provenance. Organizations using ZoomInfo-sourced leads may be making decisions based on data obtained through undisclosed collection methods.

55

Signal Corruption

high

As a registered data broker, ZoomInfo aggregates and resells business contact information to competitors and third parties. Companies whose employees appear in ZoomInfo database effectively leak demand signals - who they are hiring, their tech stack, growth patterns - to anyone paying for access.

100

Legal Tail Risk

critical

ZoomInfo creates attack surface through extensive data aggregation. Their database of 300M+ business professionals provides reconnaissance value to threat actors. The 26.6% pre-consent tracking rate exposes client websites to regulatory enforcement risk.

0

GTM Attack Surface

low

Critical consent liability: ZoomInfo claims GDPR and CCPA compliance while operating as a registered data broker with documented pre-consent tracking. California AG registration confirms personal data sales. Organizations using ZoomInfo face vicarious liability for their data collection practices.

Profile: zoominfoFirst Seen: 2025-12-25Last Updated: 2026-01-26
Confidence:HIGH

Profile by BLACKOUT Threat Intelligence