Jefit
Disclosed Mar 18, 20215 years ago9,052,457 accountsConfirmed
In August 2020, the workout tracking app Jefit suffered a data breach . The data was subsequently sold within the hacking community and included over 9 million email and IP addresses, usernames and passwords stored as either vBulletin or argon2 hashes. Several million cracked passwords later appeared in broad circulation.
What is known
| People affected | 9,052,457 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Mar 18, 2021 |
| Happened | Sep 13, 2021 |
| Attack | Hacking |
| Data exposed | Emails, IP addresses, Passwords |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Jefitoag.ca.gov · Official notice | Official notice |
| Have I Been Pwned: Jefithaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Mar 18, 2021 | |
| Have I Been Pwnedaccounts in the data | Apr 27, 2021 | 9,052,457 |
History of this record
- 2026-09-25 · hibp: empty to Jefit · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["emails","ip-addresses","passwords"] · backfill source
- 2026-09-25 · records_basis: empty to hibp · backfill source
- 2026-09-25 · records: empty to 9052457 · backfill source
- 2026-09-25 · summary: empty to In August 2020, the workout tracking app Jefit suffered a data breach . The data was subsequently sold within the hacking community and included over 9 million email and IP addresses, usernames and passwords stored as either vBulletin or ar · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.