All breaches
Zacks data breach8.9M accounts compromised on 2020-05-10
Verified
Zacks (zacks.com) was the source of a data breach dated 2020-05-10, exposing 8,929,503 accounts. The details below are mirrored from Have I Been Pwned and reflect the source's account of the incident at the time of publication.
Incident Report
| Target Organization | Zacks |
|---|---|
| Source Name | Zacks |
| Domain | zacks.com |
| Breach Date | 2020-05-10 |
| Added to HIBP | 2023-06-10 |
| Last Modified | 2023-06-10 |
| Accounts Compromised | 8,929,503(8.9M) |
| Data Exposed | Email addressesNamesPasswordsPhone numbersPhysical addressesUsernames |
| Status | Verified by HIBP |
Description
In December 2022, the investment research company Zacks announced a data breach. The following month, reports emerged of the incident impacting 820k customers. However, in June 2023, a corpus of data with almost 9M Zacks customers appeared before being broadly circulated on a popular hacking forum. The most recent data was dated May 2020 and included names, usernames, email and physical addresses, phone numbers and passwords stored as unsalted SHA-256 hashes. On disclosure of the larger breach, Zacks advised that in addition to their original report "the unauthorised third parties also gained access to encrypted [sic] passwords of zacks.com customers, but only in the encrypted [sic] format".
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.