What was exposed, when it happened, and which databases confirm it.
- accounts
- 41,817,893
- Breached
- December 7, 2017
- Last Update
- July 16, 2019
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In approximately December 2017, the online photo editing site piZap suffered a data breach. The data was later placed up for sale on a dark web marketplace along with a collection of other data breaches in February 2019. A total of 42 million unique email addresses were included in the breach alongside names, genders and links to Facebook profiles when the social media platform was used to authenticate to piZap. When accounts were created directly on piZap without using Facebook for authentication, passwords stored as SHA-1 hashes were also exposed. The data was provided to HIBP by a source who requested it be attributed to "[email protected]".
Compromised Info
- Email addresses
- Genders
- Geographic locations
- Names
- Passwords
- Social media profiles
- Usernames
- Website activity
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- Dehashed— linked via domain matching
- HIBP
FAQ
What was leaked in the piZap breach?
The piZap breach exposed: Email addresses, Genders, Geographic locations, Names, Passwords, Social media profiles, Usernames, and Website activity.
When did the piZap breach happen?
The piZap breach was disclosed on December 7, 2017 and affected 41,817,893 records.
Am I affected by the piZap breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the piZap leak.