Classic site
Emotet logo

Breach registry

Emotet Data Breach

What was exposed, when it happened, and which databases confirm it.

VerifiedSensitiveMalwareFree to search
accounts
4,324,770
Breached
January 27, 2021
Last Update
January 5, 2022

Were you caught in this breach?

Search your email, phone number or username against every record CheckLeaked indexes.

Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.

What happened

In January 2021, the FBI in partnership with the Dutch NHTCU, German BKA and other international law enforcement agencies brought down the world's most dangerous malware: Emotet. The agencies obtained data collected by the malware and provided impacted email addresses to HIBP so that impacted individuals and domain owners could assess their exposure. Read more about the takedown and recommended actions.

Compromised Info

  • Email addresses
  • Passwords

Attestation

Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.

HIBP4,324,770
DEHASHED4,324,770
LEAKCHECKnot attested
VIGILANTEnot attested

Sources & Link Methods

  • HIBP

FAQ

What was leaked in the Emotet breach?

The Emotet breach exposed: Email addresses and Passwords.

When did the Emotet breach happen?

The Emotet breach was disclosed on January 27, 2021 and affected 4,324,770 records.

Am I affected by the Emotet breach?

Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Emotet leak.

Advertising choice

Google Analytics stays active. Allow Google Ads, LinkedIn Ads and Reddit Ads to measure purchases and personalize advertising? Your choice won’t affect search or purchases. You can change it in Settings.

Privacy policy