Every public data breach

44 disclosed this week · 26,355 on record

Vultr

Disclosed Nov 20, 2025187,872 accountsConfirmed

Official notice

In March 2023, the "AI-first global cloud platform" Vultr disclosed a security incident at a third-party vendor . Dating back to the previous year, the incident was attributed to the ActiveCampaign email marketing service provider and resulted in the exposure of 188k unique email addresses. A small number of records also included name, IP address and country of origin. No Vultr systems or additional customer data were impacted. Vultr subsequently self-submitted the impacted data to HIBP.

What is known

People affected187,872 (accounts in the leaked data, per Have I Been Pwned)
DisclosedNov 20, 2025
HappenedJul 8, 2022
AttackVendor breach
Data exposedEmailsLocationIP addressesNames
SectorTech
StatusConfirmed
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned), confirmed by Company page. Record counts are as reported. Not legal advice.

Everything about Vultr