Every public data breach

44 disclosed this week · 26,355 on record

Ducks Unlimited

Disclosed Nov 16, 20211,324,364 accountsUnverified

In mid-2021, Risk Based Security reported on a database sourced from Ducks Unlimited being traded online . The data dated back to January 2021 and contained 1.3M unique email addresses across both a membership list and a list of website users. Impacted data included names, phones numbers, physical addresses, dates of birth and passwords stored as unsalted MD5 hashes.

What is known

People affected1,324,364 (accounts in the leaked data, per Have I Been Pwned)
DisclosedNov 16, 2021
HappenedJan 29, 2021
AttackNot stated
Data exposedDates of birthEmailsNamesPasswordsPhone numbersAddresses
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Ducks Unlimited