Trello
Disclosed Jan 22, 20242 years ago15,111,945 accountsUnverified
Public API abuse lets scraper compile 15 million Trello user emails
Data on more than 15 million Trello users, including emails, names and usernames, was posted for sale after being compiled by enumerating a publicly accessible Trello resource with email addresses from earlier breaches. Trello said no unauthorized access to its systems had occurred.
What is known
| People affected | 15,111,945 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jan 22, 2024 |
| Happened | Jan 16, 2024 |
| Attack | Scraping |
| Data exposed | Emails, Names |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Trellohaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Jan 22, 2024 | 15,111,945 |
| Researchtotal | Jan 22, 2024 |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · attack: misconfiguration to scraping · seed source
- 2026-09-25 · summary: In January 2024, data was scraped from Trello and posted for sale on a popular hacking forum . Containing over 15M email addresses, names and usernames, the data was obtained by enumerating a publicly accessible resource using email address to Data on more than 15 million Trello users, including emails, names and usernames, was posted for sale after being compiled by enumerating a publicly accessible Trello resource with email addresses from earlier breaches. Trello said no unaut · seed source
- 2026-09-25 · title: empty to Public API abuse lets scraper compile 15 million Trello user emails · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.