Minted
Disclosed May 27, 20206 years ago4,280,000 affectedConfirmed
In May 2020, the online marketplace for independent artists Minted suffered a data breach that exposed 4.4M unique customer records subsequently sold on a dark web marketplace. Exposed data also included names, physical addresses, phone numbers and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com .
What is known
| People affected | 4,280,000 (as reported by the organization) |
|---|---|
| Disclosed | May 27, 2020 |
| Discovered | May 15, 2020 |
| Happened | May 6, 2020 |
| Attack | Hacking |
| Data exposed | Names, Credentials and tokens, Emails, Passwords, Phone numbers, Addresses |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Mintedoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Mintedatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Mintedattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Mintedjustice.oregon.gov · Official notice | Official notice |
| Have I Been Pwned: Mintedhaveibeenpwned.com · Aggregator | Aggregator |
| Maine Attorney General breach notice archive: Mintedmaine.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Washington AGresidents of WA | May 27, 2020 | 68,900 |
| California AGresidents of CA | May 28, 2020 | |
| Delaware DOJresidents of DE | May 28, 2020 | 6,300 |
| Oregon DOJresidents of OR | May 28, 2020 | 4,280,000 |
| Maine AGresidents of ME | May 28, 2020 | |
| Have I Been Pwnedaccounts in the data | Nov 3, 2020 | 4,418,182 |
History of this record
- 2026-09-25 · source: empty to https://www.maine.gov/ag/sites/maine.gov.ag/files/docs/Data%20breach%20spreadsheet%2012-6-2018%20through%209-14-2020%20REDACTED.xlsx · backfill source
- 2026-09-25 · hibp: empty to Minted · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · data_types: ["names","credentials"] to ["names","credentials","emails","passwords","phone","addresses"] · backfill source
- 2026-09-25 · summary: empty to In May 2020, the online marketplace for independent artists Minted suffered a data breach that exposed 4.4M unique customer records subsequently sold on a dark web marketplace. Exposed data also included names, physical addresses, phone num · backfill source
- 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 4280000 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · disclosed: 2020-05-28 to 2020-05-27 · backfill source
- 2026-09-25 · discovered: empty to 2020-05-15 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.