ShareThis
Disclosed Feb 28, 20197 years ago40,960,499 accountsConfirmed
In July 2018, the social bookmarking and sharing service ShareThis suffered a data breach . The incident exposed 41 million unique email addresses alongside names and in some cases, dates of birth and password hashes. In 2019, the data appeared listed for sale on a dark web marketplace (along with several other large breaches) and subsequently began circulating more broadly. The data was provided to HIBP by dehashed.com .
What is known
| People affected | 40,960,499 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Feb 28, 2019 |
| Discovered | Feb 11, 2019 |
| Happened | Jul 9, 2018 |
| Attack | Not stated |
| Data exposed | Dates of birth, Emails, Names, Passwords |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: ShareThisoag.ca.gov · Official notice | Official notice |
| Have I Been Pwned: ShareThishaveibeenpwned.com · Aggregator | Aggregator |
| Maine Attorney General breach notice archive: ShareThismaine.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Feb 28, 2019 | |
| Maine AGresidents of ME | Feb 28, 2019 | |
| Have I Been Pwnedaccounts in the data | Mar 3, 2019 | 40,960,499 |
History of this record
- 2026-09-25 · discovered: empty to 2019-02-11 · backfill source
- 2026-09-25 · hibp: empty to ShareThis · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · data_types: [] to ["dob","emails","names","passwords"] · backfill source
- 2026-09-25 · records_basis: empty to hibp · backfill source
- 2026-09-25 · records: empty to 40960499 · backfill source
- 2026-09-25 · occurred: empty to 2018-07-09 · backfill source
- 2026-09-25 · summary: empty to In July 2018, the social bookmarking and sharing service ShareThis suffered a data breach . The incident exposed 41 million unique email addresses alongside names and in some cases, dates of birth and password hashes. In 2019, the data appe · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.