← Back to timeline

Zacks

SourceHave I Been Pwned
StatusConfirmed breach
AddedJune 10, 2023
OccurredMay 10, 2020
Accounts affected8,929,503
Domainzacks.com
All Zacks breaches →
What was exposed
Email addressesNamesPasswordsPhone numbersPhysical addressesUsernames
What to do if you were affected
Worried your data is exposed?Take back control of your personal data with Literal.
Protect your data
Details
In December 2022, the investment research company Zacks announced a data breach . The following month, reports emerged of the incident impacting 820k customers . However, in June 2023, a corpus of data with almost 9M Zacks customers appeared before being broadly circulated on a popular hacking forum. The most recent data was dated May 2020 and included names, usernames, email and physical addresses, phone numbers and passwords stored as unsalted SHA-256 hashes. On disclosure of the larger breach, Zacks advised that in addition to their original report "the unauthorised third parties also gained access to encrypted [sic] passwords of zacks.com customers, but only in the encrypted [sic] format".
Frequently asked questions

What is the Zacks data breach?

In December 2022, the investment research company Zacks announced a data breach . The following month, reports emerged of the incident impacting 820k customers . However, in June 2023, a corpus of data with almost 9M Zacks customers appeared before being...

When did the data breach happen?

This data breach occurred around May 2020.

How many accounts were affected?

Around 8,929,503 accounts were affected.

What information was exposed?

Exposed data included Email addresses, Names, Passwords, Phone numbers, Physical addresses and Usernames.

What should I do if I was affected?

Change your password for this account, and anywhere you reused it. Turn on two-factor authentication. Expect more phishing and spam at this address. Treat messages that reference this company with extra caution. Watch for text-message phishing and SIM-swap attempts on your phone number. Be wary of targeted scams that use your personal details to sound convincing.

View the original record on Have I Been Pwned ↗
Related breaches