TrueFire
Disclosed Feb 13, 20206 years ago8,190 affectedConfirmed
In February 2020, the guitar tuition website TrueFire suffered a data breach which impacted 600k members. The breach exposed extensive personal information including names, email and physical addresses, account balances and unsalted MD5 password hashes. The data was provided to HIBP by dehashed.com .
What is known
| People affected | 8,190 (as reported by the organization) |
|---|---|
| Disclosed | Feb 13, 2020 |
| Discovered | Jul 28, 2020 |
| Happened | Feb 21, 2020 |
| Attack | Hacking |
| Data exposed | Dates of birth, Emails, Names, Passwords, Phone numbers, Addresses, Payment cards, Financial |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: TrueFireoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: TrueFireatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: TrueFirejustice.oregon.gov · Official notice | Official notice |
| Have I Been Pwned: TrueFirehaveibeenpwned.com · Aggregator | Aggregator |
| Indiana Attorney General 2020 data breach report: TrueFirein.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: TrueFiremaine.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Feb 13, 2020 | 75 |
| Maine AGresidents of ME | Feb 13, 2020 | 26 |
| California AGresidents of CA | Mar 10, 2020 | |
| Have I Been Pwnedaccounts in the data | Aug 2, 2020 | 599,667 |
| California AGresidents of CA | Oct 27, 2020 | |
| Washington AGresidents of WA | Oct 27, 2020 | 2,633 |
| Oregon DOJresidents of OR | Oct 27, 2020 | 43,377 |
History of this record
- 2026-09-25 · data_types: ["dob","emails","names","passwords","phone","addresses"] to ["dob","emails","names","passwords","phone","addresses","payment-card","financial"] · backfill source
- 2026-09-25 · records_basis: hibp to organization · backfill source
- 2026-09-25 · records: 599667 to 8190 · backfill source
- 2026-09-25 · disclosed: 2020-03-10 to 2020-02-13 · backfill source
- 2026-09-25 · hibp: empty to TrueFire · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · data_types: [] to ["dob","emails","names","passwords","phone","addresses"] · backfill source
- 2026-09-25 · records_basis: empty to hibp · backfill source
- 2026-09-25 · records: empty to 599667 · backfill source
- 2026-09-25 · summary: empty to In February 2020, the guitar tuition website TrueFire suffered a data breach which impacted 600k members. The breach exposed extensive personal information including names, email and physical addresses, account balances and unsalted MD5 pas · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2020-07-28 · backfill source
- 2026-09-25 · disclosed: 2020-10-27 to 2020-03-10 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.