What was exposed, when it happened, and which databases confirm it.
- accounts
- 4,468,566
- Breached
- December 17, 2019
- Last Update
- April 15, 2022
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
What happened
In approximately December 2019, an alleged data breach of the lawyer directory service Avvo was published to an online hacking forum and used in an extortion scam (it's possible the exposure dates back earlier than that). The data contained 4.1M unique email addresses alongside SHA-1 hashes, most likely representing user passwords. Multiple attempts at contacting Avvo over the course of a week were unsuccessful and the authenticity of the data was eventually verified with common Avvo and HIBP subscribers.
Compromised Info
- Email addresses
- Passwords
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
3,995 accounts DEHASHED reports beyond HIBP
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via domain match to LeakCheck
- HIBP
FAQ
What was leaked in the Avvo breach?
The Avvo breach exposed: Email addresses and Passwords.
When did the Avvo breach happen?
The Avvo breach was disclosed on December 17, 2019 and affected 4,101,101 records.
Am I affected by the Avvo breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Avvo leak.