Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Breach occurred 2020-09-17Verifiedshopback.com
What happened
In September 2020, the cashback reward program ShopBack suffered a data breach. The incident exposed over 20 million unique email addresses along with names, phone numbers, country of residence and passwords stored as salted SHA-1 hashes. The data was provided to HIBP by dehashed.com.
Data exposed
Frequently asked questions
The ShopBack data breach occurred on September 17, 2020. It was added to Have I Been Pwned's breach catalog on April 25, 2021.
20,529,819 accounts were affected by the ShopBack data breach, according to Have I Been Pwned's records.
The ShopBack breach exposed the following data types: Email addresses, Geographic locations, Names, Passwords, Phone numbers.
Yes. Have I Been Pwned has verified the ShopBack breach, meaning there's confirmed evidence the exposed data is genuine and tied to real accounts.
Use KazaSec's free Email Breach Checker (/tools/breach-check) to check whether a specific email address has surfaced in the ShopBack breach, or any other known breach — the tool never stores what you search.
Our free Email Breach Checker tells you whether a specific email address has surfaced in this breach — or any other known breach — without ever storing what you search.
Check your email →Talk to us about this
We help organizations find and fix the gaps that lead to a breach, before they do.