Data breach
ShopBackshopback.com
20 529 819 accounts exposed in a breach dated 2020-09-17.
Breached2020-09-17Added to HIBP2021-04-25 UTCUpdated by HIBP2021-04-25 UTCAccounts20 529 819Domainshopback.com
Verified
What happened in Have I Been Pwned’s words
In September 2020, the cashback reward program ShopBack suffered a data breach. The incident exposed over 20 million unique email addresses along with names, phone numbers, country of residence and passwords stored as salted SHA-1 hashes. The data was provided to HIBP by dehashed.com.
Exposed data as HIBP classifies it
- Email addresses
- Geographic locations
- Names
- Passwords
- Phone numbers
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC