Fishbrain
Disclosed Sep 2, 20263 weeks agoConfirmed
Fishing app Fishbrain resets passwords after user data breach
Swedish fishing app Fishbrain said an unauthorized person accessed an environment hosting user data from as early as July 30, 2026, taking names, emails, phone numbers, usernames, country, birth dates and salted password hashes. It patched the flaw and reset affected passwords.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Sep 2, 2026 |
| Discovered | Aug 19, 2026 |
| Happened | Jul 30, 2026 |
| Attack | Hacking |
| Data exposed | Names, Emails, Phone numbers, Passwords, Dates of birth, Location |
| Sector | Tech · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Fishbrainoag.ca.gov · Official notice | Official notice |
| California AG breach report: Fishbrain ABoag.ca.gov · Regulator | Regulator |
| Fishbrain notice of data breachoag.ca.gov · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Sep 2 | |
| Researchtotal | Sep 2 |
History of this record
- 2026-09-25 · sector: other to tech · seed source
- 2026-09-25 · attack: unknown to hacking · seed source
- 2026-09-25 · data_types: [] to ["names","emails","phone","passwords","dob","location"] · seed source
- 2026-09-25 · discovered: empty to 2026-08-19 · seed source
- 2026-09-25 · summary: empty to Swedish fishing app Fishbrain said an unauthorized person accessed an environment hosting user data from as early as July 30, 2026, taking names, emails, phone numbers, usernames, country, birth dates and salted password hashes. It patched · seed source
- 2026-09-25 · title: empty to Fishing app Fishbrain resets passwords after user data breach · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.