Skip to content

Ducks Unlimited

Disclosed Nov 16, 20214 years ago1,324,364 accountsUnverified

In mid-2021, Risk Based Security reported on a database sourced from Ducks Unlimited being traded online . The data dated back to January 2021 and contained 1.3M unique email addresses across both a membership list and a list of website users. Impacted data included names, phones numbers, physical addresses, dates of birth and passwords stored as unsalted MD5 hashes.

What is known

People affected1,324,364 (accounts in the leaked data, per Have I Been Pwned)
DisclosedNov 16, 2021
HappenedJan 29, 2021
AttackNot stated
Data exposedDates of birth, Emails, Names, Passwords, Phone numbers, Addresses
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Ducks Unlimitedhaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataNov 16, 20211,324,364
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Ducks Unlimited

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.