Mathway
Disclosed May 22, 20206 years ago25,692,862 accountsConfirmed
In January 2020, the math solving website Mathway suffered a data breach that exposed over 25M records . The data was subsequently sold on a dark web marketplace and included names, Google and Facebook IDs, email addresses and salted password hashes.
What is known
| People affected | 25,692,862 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | May 22, 2020 |
| Discovered | May 15, 2020 |
| Happened | Jan 13, 2020 |
| Attack | Hacking |
| Data exposed | Names, Emails, Passwords |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Mathwayoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Mathwayatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Mathwayattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Mathwayjustice.oregon.gov · Official notice | Official notice |
| Have I Been Pwned: Mathwayhaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | May 22, 2020 | |
| Washington AGresidents of WA | May 22, 2020 | |
| Delaware DOJresidents of DE | May 22, 2020 | |
| Oregon DOJresidents of OR | May 22, 2020 | |
| Have I Been Pwnedaccounts in the data | Jun 5, 2020 | 25,692,862 |
History of this record
- 2026-09-25 · hibp: empty to Mathway · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · data_types: ["names"] to ["names","emails","passwords"] · backfill source
- 2026-09-25 · records_basis: empty to hibp · backfill source
- 2026-09-25 · records: empty to 25692862 · backfill source
- 2026-09-25 · occurred: empty to 2020-01-13 · backfill source
- 2026-09-25 · summary: empty to In January 2020, the math solving website Mathway suffered a data breach that exposed over 25M records . The data was subsequently sold on a dark web marketplace and included names, Google and Facebook IDs, email addresses and salted passwo · backfill source
- 2026-09-25 · data_types: [] to ["names"] · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2020-05-15 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.