Vultr
Disclosed Nov 20, 202510 months ago187,872 accountsConfirmed
In March 2023, the "AI-first global cloud platform" Vultr disclosed a security incident at a third-party vendor . Dating back to the previous year, the incident was attributed to the ActiveCampaign email marketing service provider and resulted in the exposure of 188k unique email addresses. A small number of records also included name, IP address and country of origin. No Vultr systems or additional customer data were impacted. Vultr subsequently self-submitted the impacted data to HIBP.
What is known
| People affected | 187,872 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Nov 20, 2025 |
| Happened | Jul 8, 2022 |
| Attack | Vendor breach |
| Data exposed | Emails, Location, IP addresses, Names |
| Sector | Tech |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Vultr disclosureblogs.vultr.com · The organization | The organization |
| Have I Been Pwned: Vultrhaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Nov 20, 2025 | 187,872 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned), confirmed by Company page. Record counts are as reported. Not legal advice.