Breachesby GlyphShopBack
Disclosed Apr 25, 202120,529,819 accountsUnverified
In September 2020, the cashback reward program ShopBack suffered a data breach . The incident exposed over 20 million unique email addresses along with names, phone numbers, country of residence and passwords stored as salted SHA-1 hashes. The data was provided to HIBP by dehashed.com .
What is known
| People affected | 20,529,819 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Apr 25, 2021 |
| Happened | Sep 17, 2020 |
| Attack | Not stated |
| Data exposed | EmailsLocationNamesPasswordsPhone numbers |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.