Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Breach occurred 2020-12-21Verifiednetgalley.com
What happened
In December 2020, the book promotion site NetGalley suffered a data breach. The incident exposed 1.4 million unique email addresses alongside names, usernames, physical and IP addresses, phone numbers, dates of birth and passwords stored as salted SHA-1 hashes.
Data exposed
Frequently asked questions
The NetGalley data breach occurred on December 21, 2020. It was added to Have I Been Pwned's breach catalog on February 23, 2021.
1,436,435 accounts were affected by the NetGalley data breach, according to Have I Been Pwned's records.
The NetGalley breach exposed the following data types: Dates of birth, Email addresses, IP addresses, Names, Passwords, Phone numbers, Physical addresses, Usernames.
Yes. Have I Been Pwned has verified the NetGalley breach, meaning there's confirmed evidence the exposed data is genuine and tied to real accounts.
Use KazaSec's free Email Breach Checker (/tools/breach-check) to check whether a specific email address has surfaced in the NetGalley breach, or any other known breach — the tool never stores what you search.
Our free Email Breach Checker tells you whether a specific email address has surfaced in this breach — or any other known breach — without ever storing what you search.
Check your email →Talk to us about this
We help organizations find and fix the gaps that lead to a breach, before they do.