Zynga

Disclosed Aug 31, 2019172,869,660 accountsConfirmed

Hackers access Zynga player account data including Words With Friends

Zynga announced that outside hackers may have illegally accessed certain player account information in the third quarter of 2019, with no financial data accessed; Have I Been Pwned later loaded 173 million unique email addresses from the breach.

What is known

People affected	172,869,660 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Aug 31, 2019
Happened	Oct 22, 2019
Attack	Hacking
Data exposed	NamesCredentials and tokensEmailsPasswordsPhone numbers
Sector	Gaming · US
Status	Confirmed
Check your email	Have I Been Pwned

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Zynga

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: Zynga

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Zynga

The organizationweb.archive.org

Zynga: Player Security Announcement

SEC filingsec.gov

Zynga 10-Q for Q3 2019

Notices filed

Residents of DEAug 31, 2019

Delaware DOJ640 people

TotalSep 12, 2019

ResearchCount not stated

Residents of CASep 30, 2019

California AGCount not stated

Accounts in the dataDec 19, 2019

Have I Been Pwned172,869,660 people

History of this record

sector2026-09-25

tech to gamingby seedSource

attack2026-09-25

unknown to hackingby seedSource

summary2026-09-25

In September 2019, game developer Zynga (the creator of Words with Friends) suffered a data breach . The incident exposed 173M unique email addresses alongside usernames and passwords stored as salted SHA-1 hashes. The data was provided to to Zynga announced that outside hackers may have illegally accessed certain player account information in the third quarter of 2019, with no financial data accessed; Have I Been Pwned later loaded 173 million unique email addresses from the brby seedSource

title2026-09-25

empty to Hackers access Zynga player account data including Words With Friendsby seedSource

hibp2026-09-25

empty to Zyngaby backfillSource

sector2026-09-25

other to techby backfillSource

data_types2026-09-25

["names","credentials"] to ["names","credentials","emails","passwords","phone"]by backfillSource

records_basis2026-09-25

empty to hibpby backfillSource

records2026-09-25

empty to 172869660by backfillSource

summary2026-09-25

empty to In September 2019, game developer Zynga (the creator of Words with Friends) suffered a data breach . The incident exposed 173M unique email addresses alongside usernames and passwords stored as salted SHA-1 hashes. The data was provided to by backfillSource

data_types2026-09-25

[] to ["names","credentials"]by backfillSource

disclosed2026-09-25

2019-09-30 to 2019-08-31by backfillSource

occurred2026-09-25

empty to 2019-10-22by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Zynga