Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Breach occurred 2019-02-20Verifiedcafepress.com
What happened
In February 2019, the custom merchandise retailer CafePress suffered a data breach. The exposed data included 23 million unique email addresses with some records also containing names, physical addresses, phone numbers and passwords stored as SHA-1 hashes.
Data exposed
Frequently asked questions
The CafePress data breach occurred on February 20, 2019. It was added to Have I Been Pwned's breach catalog on August 5, 2019.
23,205,290 accounts were affected by the CafePress data breach, according to Have I Been Pwned's records.
The CafePress breach exposed the following data types: Email addresses, Names, Passwords, Phone numbers, Physical addresses.
Yes. Have I Been Pwned has verified the CafePress breach, meaning there's confirmed evidence the exposed data is genuine and tied to real accounts.
Use KazaSec's free Email Breach Checker (/tools/breach-check) to check whether a specific email address has surfaced in the CafePress breach, or any other known breach — the tool never stores what you search.
Our free Email Breach Checker tells you whether a specific email address has surfaced in this breach — or any other known breach — without ever storing what you search.
Check your email →Talk to us about this
We help organizations find and fix the gaps that lead to a breach, before they do.