Mailbox exposure means email-related information from a user or organization has been revealed to an attacker or made accessible through a breach, leak, or public listing. This can include mailbox addresses, message contents, contact names, internal threads, or metadata that helps identify who talks to whom inside a company.
In cyber security, even limited mailbox exposure matters because email is a powerful foothold for phishing, impersonation, password reset abuse, and internal mapping. Attackers use exposed mail data to craft believable messages, target executives or support staff, and learn reporting chains. Defenders should monitor for leaked mailboxes, rotate credentials, alert users to impersonation risk, and tighten email authentication and access controls to reduce follow-on abuse.