JoomlArt

Disclosed Nov 1, 201822,477 accountsUnverified

In January 2018, the Joomla template website JoomlArt inadvertently exposed more than 22k unique customer records in a Jira ticket. The exposed data was from iJoomla and JomSocial, both services that JoomlArt acquired the previous year . The data included usernames, email addresses, purchases and passwords stored as MD5 hashes. When contacted, JoomlArt advised they were aware of the incident and had previously notified impacted parties.

What is known

People affected	22,477 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Nov 1, 2018
Happened	Jan 30, 2018
Attack	Lost or stolen device
Data exposed	EmailsNamesPasswordsPayment cards
Sector	Tech
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: JoomlArt

Notices filed

Accounts in the dataNov 1, 2018

Have I Been Pwned22,477 people

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about JoomlArt