What was exposed, when it happened, and which databases confirm it.
- accounts
- 1,324,364
- Breached
- January 29, 2021
- Last Update
- November 16, 2021
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In mid-2021, Risk Based Security reported on a database sourced from Ducks Unlimited being traded online. The data dated back to January 2021 and contained 1.3M unique email addresses across both a membership list and a list of website users. Impacted data included names, phones numbers, physical addresses, dates of birth and passwords stored as unsalted MD5 hashes.
Compromised Info
- Dates of birth
- Email addresses
- Names
- Passwords
- Phone numbers
- Physical addresses
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- HIBP
FAQ
What was leaked in the DucksUnlimited breach?
The DucksUnlimited breach exposed: Dates of birth, Email addresses, Names, Passwords, Phone numbers, and Physical addresses.
When did the DucksUnlimited breach happen?
The DucksUnlimited breach was disclosed on January 29, 2021 and affected 1,324,364 records.
Am I affected by the DucksUnlimited breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the DucksUnlimited leak.