Dave

Disclosed Jul 27, 20207,500,000 affectedConfirmed

In June 2020, the digital banking app Dave suffered a data breach which exposed 7.5 million rows of data and subsequently appeared for public download on a hacking forum. The breach exposed extensive personal information including almost 3 million unique email addresses alongside names, dates of birth, encrypted social security numbers and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com .

What is known

People affected	7,500,000 (as reported by the organization)
Disclosed	Jul 27, 2020
Discovered	Jul 1, 2020
Happened	Jun 23, 2020
Attack	Hacking
Data exposed	NamesDates of birthEmailsPasswordsPhone numbersAddressesGovernment IDsSocial Security numbers
Sector	Tech · US
Status	Confirmed
Check your email	Have I Been Pwned

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Dave

Official noticeatg.wa.gov

Washington Attorney General breach notice: Dave

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: Dave

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Dave

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Dave

Official noticein.gov

Indiana Attorney General 2020 data breach report: Dave

Official noticemaine.gov

Maine Attorney General breach notice archive: Dave

Notices filed

Accounts in the dataJul 27, 2020

Have I Been Pwned2,964,182 people

Residents of CAAug 20, 2020

California AGCount not stated

Residents of WAAug 20, 2020

Washington AG40,998 people

Residents of ORAug 20, 2020

Oregon DOJ7,500,000 people

Residents of MEAug 20, 2020

Maine AG4,175 people

Residents of DEAug 21, 2020

Delaware DOJ7,299 people

Residents of INAug 21, 2020

Indiana AG64,388 people

History of this record

data_types2026-09-25

["names","dob","emails","passwords","phone","addresses","government-id"] to ["names","dob","emails","passwords","phone","addresses","government-id","ssn"]by backfillSource

source2026-09-25

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2020.pdfby backfillSource

hibp2026-09-25

empty to Daveby backfillSource

sector2026-09-25

other to techby backfillSource

data_types2026-09-25

["names"] to ["names","dob","emails","passwords","phone","addresses","government-id"]by backfillSource

disclosed2026-09-25

2020-08-20 to 2020-07-27by backfillSource

summary2026-09-25

empty to In June 2020, the digital banking app Dave suffered a data breach which exposed 7.5 million rows of data and subsequently appeared for public download on a hacking forum. The breach exposed extensive personal information including almost 3 by backfillSource

data_types2026-09-25

[] to ["names"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 7500000by backfillSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2020-07-01by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Dave