What was exposed, when it happened, and which databases confirm it.
- accounts
- 37,750,826
- Breached
- January 27, 2020
- Last Update
- May 28, 2020
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
What happened
In January 2020, the mobile app to "compare anything" Wishbone suffered another data breach which followed their breach from 2016. An extensive amount of personal information including almost 10M unique email addresses alongside names, phone numbers geographic locations and other personal attributes were leaked online and extensively redistributed. Passwords stored as unsalted MD5 hashes were also included in the breach. The data was provided to HIBP by a source who requested it be attributed to "All3in".
Compromised Info
- Auth tokens
- Dates of birth
- Email addresses
- Genders
- Geographic locations
- IP addresses
- Names
- Passwords
- Phone numbers
- Profile photos
- Social media profiles
- Usernames
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via domain matching
- HIBP
FAQ
What was leaked in the Wishbone2020 breach?
The Wishbone2020 breach exposed: Auth tokens, Dates of birth, Email addresses, Genders, Geographic locations, IP addresses, Names, Passwords, Phone numbers, Profile photos, Social media profiles, and Usernames.
When did the Wishbone2020 breach happen?
The Wishbone2020 breach was disclosed on January 27, 2020 and affected 37,750,826 records.
Am I affected by the Wishbone2020 breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Wishbone2020 leak.