Dave
Disclosed Jul 27, 20206 years ago7,500,000 affectedConfirmed
In June 2020, the digital banking app Dave suffered a data breach which exposed 7.5 million rows of data and subsequently appeared for public download on a hacking forum. The breach exposed extensive personal information including almost 3 million unique email addresses alongside names, dates of birth, encrypted social security numbers and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com .
What is known
| People affected | 7,500,000 (as reported by the organization) |
|---|---|
| Disclosed | Jul 27, 2020 |
| Discovered | Jul 1, 2020 |
| Happened | Jun 23, 2020 |
| Attack | Hacking |
| Data exposed | Names, Dates of birth, Emails, Passwords, Phone numbers, Addresses, Government IDs, Social Security numbers |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Daveoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Daveatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Daveattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Davejustice.oregon.gov · Official notice | Official notice |
| Have I Been Pwned: Davehaveibeenpwned.com · Aggregator | Aggregator |
| Indiana Attorney General 2020 data breach report: Davein.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: Davemaine.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Jul 27, 2020 | 2,964,182 |
| California AGresidents of CA | Aug 20, 2020 | |
| Washington AGresidents of WA | Aug 20, 2020 | 40,998 |
| Oregon DOJresidents of OR | Aug 20, 2020 | 7,500,000 |
| Maine AGresidents of ME | Aug 20, 2020 | 4,175 |
| Delaware DOJresidents of DE | Aug 21, 2020 | 7,299 |
| Indiana AGresidents of IN | Aug 21, 2020 | 64,388 |
History of this record
- 2026-09-25 · data_types: ["names","dob","emails","passwords","phone","addresses","government-id"] to ["names","dob","emails","passwords","phone","addresses","government-id","ssn"] · backfill source
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2020.pdf · backfill source
- 2026-09-25 · hibp: empty to Dave · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · data_types: ["names"] to ["names","dob","emails","passwords","phone","addresses","government-id"] · backfill source
- 2026-09-25 · disclosed: 2020-08-20 to 2020-07-27 · backfill source
- 2026-09-25 · summary: empty to In June 2020, the digital banking app Dave suffered a data breach which exposed 7.5 million rows of data and subsequently appeared for public download on a hacking forum. The breach exposed extensive personal information including almost 3 · backfill source
- 2026-09-25 · data_types: [] to ["names"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 7500000 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2020-07-01 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.