StockX
Disclosed Aug 8, 20197 years ago6,840,339 accountsConfirmed
In July 2019, the fashion and sneaker trading platform StockX suffered a data breach which was subsequently sold via a dark webmarketplace. The exposed data included 6.8 million unique email addresses, names, physical addresses, purchases and passwords stored as salted MD5 hashes. The data was provided to HIBP by dehashed.com .
What is known
| People affected | 6,840,339 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Aug 8, 2019 |
| Happened | May 14, 2019 |
| Attack | Not stated |
| Data exposed | Names, Emails, Passwords, Addresses, Financial |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: StockXoag.ca.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: StockXattorneygeneral.delaware.gov · Official notice | Official notice |
| Have I Been Pwned: StockXhaveibeenpwned.com · Aggregator | Aggregator |
| Maine Attorney General breach notice archive: StockXmaine.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | Aug 8, 2019 | 9,439 |
| California AGresidents of CA | Aug 9, 2019 | |
| Have I Been Pwnedaccounts in the data | Aug 10, 2019 | 6,840,339 |
| Maine AGresidents of ME | Aug 13, 2019 | 3,803 |
History of this record
- 2026-09-25 · source: empty to https://www.maine.gov/ag/sites/maine.gov.ag/files/docs/Data%20breach%20spreadsheet%2012-6-2018%20through%209-14-2020%20REDACTED.xlsx · backfill source
- 2026-09-25 · hibp: empty to StockX · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · data_types: ["names"] to ["names","emails","passwords","addresses","financial"] · backfill source
- 2026-09-25 · records_basis: empty to hibp · backfill source
- 2026-09-25 · records: empty to 6840339 · backfill source
- 2026-09-25 · summary: empty to In July 2019, the fashion and sneaker trading platform StockX suffered a data breach which was subsequently sold via a dark webmarketplace. The exposed data included 6.8 million unique email addresses, names, physical addresses, purchases a · backfill source
- 2026-09-25 · data_types: [] to ["names"] · backfill source
- 2026-09-25 · disclosed: 2019-08-09 to 2019-08-08 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.