Breachesby GlyphAvvo
Disclosed Apr 15, 20224,101,101 accountsUnverified
In approximately December 2019, an alleged data breach of the lawyer directory service Avvo was published to an online hacking forum and used in an extortion scam (it's possible the exposure dates back earlier than that). The data contained 4.1M unique email addresses alongside SHA-1 hashes, most likely representing user passwords. Multiple attempts at contacting Avvo over the course of a week were unsuccessful and the authenticity of the data was eventually verified with common Avvo and HIBP subscribers.
What is known
| People affected | 4,101,101 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Apr 15, 2022 |
| Happened | Dec 17, 2019 |
| Attack | Extortion |
| Data exposed | EmailsPasswords |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.