Zynga
Disclosed Aug 31, 20197 years ago172,869,660 accountsConfirmed
Hackers access Zynga player account data including Words With Friends
Zynga announced that outside hackers may have illegally accessed certain player account information in the third quarter of 2019, with no financial data accessed; Have I Been Pwned later loaded 173 million unique email addresses from the breach.
What is known
| People affected | 172,869,660 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Aug 31, 2019 |
| Happened | Oct 22, 2019 |
| Attack | Hacking |
| Data exposed | Names, Credentials and tokens, Emails, Passwords, Phone numbers |
| Sector | Gaming · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Zyngaoag.ca.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Zyngaattorneygeneral.delaware.gov · Official notice | Official notice |
| Have I Been Pwned: Zyngahaveibeenpwned.com · Aggregator | Aggregator |
| Zynga: Player Security Announcementweb.archive.org · The organization | The organization |
| Zynga 10-Q for Q3 2019sec.gov · SEC filing | SEC filing |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | Aug 31, 2019 | 640 |
| Researchtotal | Sep 12, 2019 | |
| California AGresidents of CA | Sep 30, 2019 | |
| Have I Been Pwnedaccounts in the data | Dec 19, 2019 | 172,869,660 |
History of this record
- 2026-09-25 · sector: tech to gaming · seed source
- 2026-09-25 · attack: unknown to hacking · seed source
- 2026-09-25 · summary: In September 2019, game developer Zynga (the creator of Words with Friends) suffered a data breach . The incident exposed 173M unique email addresses alongside usernames and passwords stored as salted SHA-1 hashes. The data was provided to to Zynga announced that outside hackers may have illegally accessed certain player account information in the third quarter of 2019, with no financial data accessed; Have I Been Pwned later loaded 173 million unique email addresses from the br · seed source
- 2026-09-25 · title: empty to Hackers access Zynga player account data including Words With Friends · seed source
- 2026-09-25 · hibp: empty to Zynga · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · data_types: ["names","credentials"] to ["names","credentials","emails","passwords","phone"] · backfill source
- 2026-09-25 · records_basis: empty to hibp · backfill source
- 2026-09-25 · records: empty to 172869660 · backfill source
- 2026-09-25 · summary: empty to In September 2019, game developer Zynga (the creator of Words with Friends) suffered a data breach . The incident exposed 173M unique email addresses alongside usernames and passwords stored as salted SHA-1 hashes. The data was provided to · backfill source
- 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
- 2026-09-25 · disclosed: 2019-09-30 to 2019-08-31 · backfill source
- 2026-09-25 · occurred: empty to 2019-10-22 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.