Jefit

Disclosed Mar 18, 20219,052,457 accountsConfirmed

In August 2020, the workout tracking app Jefit suffered a data breach . The data was subsequently sold within the hacking community and included over 9 million email and IP addresses, usernames and passwords stored as either vBulletin or argon2 hashes. Several million cracked passwords later appeared in broad circulation.

What is known

People affected	9,052,457 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Mar 18, 2021
Happened	Sep 13, 2021
Attack	Hacking
Data exposed	EmailsIP addressesPasswords
Sector	Tech · US
Status	Confirmed
Check your email	Have I Been Pwned

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Jefit

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Jefit

Notices filed

Residents of CAMar 18, 2021

California AGCount not stated

Accounts in the dataApr 27, 2021

Have I Been Pwned9,052,457 people

History of this record

hibp2026-09-25

empty to Jefitby backfillSource

sector2026-09-25

other to techby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["emails","ip-addresses","passwords"]by backfillSource

records_basis2026-09-25

empty to hibpby backfillSource

records2026-09-25

empty to 9052457by backfillSource

summary2026-09-25

empty to In August 2020, the workout tracking app Jefit suffered a data breach . The data was subsequently sold within the hacking community and included over 9 million email and IP addresses, usernames and passwords stored as either vBulletin or arby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Jefit