Skip to content

ShopBack

Disclosed Apr 25, 20215 years ago20,529,819 accountsUnverified

In September 2020, the cashback reward program ShopBack suffered a data breach . The incident exposed over 20 million unique email addresses along with names, phone numbers, country of residence and passwords stored as salted SHA-1 hashes. The data was provided to HIBP by dehashed.com .

What is known

People affected20,529,819 (accounts in the leaked data, per Have I Been Pwned)
DisclosedApr 25, 2021
HappenedSep 17, 2020
AttackNot stated
Data exposedEmails, Location, Names, Passwords, Phone numbers
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: ShopBackhaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataApr 25, 202120,529,819
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about ShopBack

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.