- Total Records10,438,765
- Unique Emails8,937,612
- Unique Usernames1,239,511
- Unique First Names3,209,455
- Unique Addresses4,586,038
Zacks.com Data Breach Exposes Millions of Customer Records in December 2022
In December 2022, Zacks.com, a popular investment research platform, experienced a massive data breach affecting more than 10 million users. The intrusion led to the exposure of detailed user information, including names, usernames, email addresses, physical addresses, phone numbers, and passwords that were secured with unsalted SHA-256 hashes. The breach surfaced publicly in early 2023, and by the summer, the compromised data was being traded and circulated more widely online. Zacks.com is widely known for providing stock research, analysis tools, and financial data to investors and professionals, so this incident quickly became a matter of concern across the investment community.
What Happened in the Zacks.com Breach?
The breach at Zacks.com was traced back to December 2022, when unauthorized parties gained access to a database containing sensitive personal information of users. While the initial details of the compromise remained internal for a few weeks, the breach was reported to the public in the early months of 2023. By June 2023, a wider release of the stolen data prompted renewed attention from cybersecurity professionals and affected customers alike.
How Many Users Were Affected and What Data Was Leaked?
The Zacks.com breach impacted a massive user base, with just over 10.4 million customer records exposed. The database included the following details for affected accounts:
- Email addresses
- Usernames
- First and last names
- Company names (if provided by users)
- Street addresses, including street number, street name, and apartment or suite number
- City, state, zip/postal code, and country
- Phone numbers
- Passwords stored as unsalted SHA-256 hashes
The combination of this information increases the potential risks, as it covers a broad range of personal and contact details, along with account login data.
Timeline of Events
- December 2022: Unauthorized access is first detected on Zacks.com. Data from millions of customer records is compromised.
- Early 2023: News of the incident emerges as Zacks.com begins notifying affected users and relevant authorities.
- June 2023: The breached data is circulated more widely across online forums and data trading channels, amplifying attention to the incident.
FAQ About the Zacks.com Data Breach
What happened in the Zacks.com data breach?
The Zacks.com breach occurred in December 2022, exposing over 10 million user records containing names, contact information, and unsalted SHA-256 hashed passwords. The data was later spread online during the first half of 2023.
How many users were affected by the Zacks.com breach?
More than 10.4 million customer accounts were impacted, making this one of the largest investment research data breaches in recent years.
What information was leaked in the Zacks.com hack?
Exposed details included emails, usernames, first and last names, company names, physical addresses (street, city, state, zip, and country), phone numbers, and hashed passwords.
Who was responsible for the Zacks.com data breach?
The identities of the attackers behind the breach have not been officially disclosed. No public attribution to an individual or group has been confirmed as of now.
How can I check if I'm in the Zacks.com breach?
You can check if your information was part of the Zacks.com breach by utilizing the DeHashed search engine.