Breachesby GlyphRegpack
Disclosed Sep 13, 2016104,977 accountsUnverified
In July 2016, a tweet was posted with a link to an alleged data breach of BlueSnap, a global payment gateway and merchant account provider . The data contained 324k payment records across 105k unique email addresses and included personal attributes such as name, home address and phone number. The data was verified with multiple Have I Been Pwned subscribers who confirmed it also contained valid transactions, partial credit card numbers, expiry dates and CVVs. A downstream consumer of BlueSnap services known as Regpack was subsequently identified as the source of the data after they identified
What is known
| People affected | 104,977 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Sep 13, 2016 |
| Happened | May 20, 2016 |
| Attack | Lost or stolen device |
| Data exposed | Payment cardsEmailsIP addressesNamesPhone numbersAddressesFinancial |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.