ZAP-Hosting data breach
From Breaches, in the HARD wiki · Updated
This article is about the November 2021 breach of ZAP-Hosting. For every breach, see Breaches.
The ZAP-Hosting data breach exposed 746,682 accounts from zap-hosting.com in November 2021. The data taken includes purchases, names, physical addresses and email addresses and 4 more kinds of data.[1]
Have I Been Pwned verified it and added it to its search on 19 Mar 2022, 4 months later. It is the 449th largest of the 618 breaches in HARD’s list.
What was exposed
ZAP-Hosting’s breach included 8 kinds of data. What each lets criminals do:
| Data | What it’s used for |
|---|---|
| Purchases | Shows what you buy, which makes fake order and refund scams convincing. |
| Names | Makes scam messages personal enough to believe. |
| Physical addresses | Used to prove who you are, and for scam letters and parcels. |
| Email addresses | Expect scam emails that name the company to look genuine. |
| Phone numbers | Expect scam texts and calls, and a higher risk of someone moving your number to their SIM. |
| Chat logs | What you wrote, readable by whoever has the data. |
| Browser user agent details | Personal details that make scam messages more convincing. |
| IP addresses | Roughly where you were when you used the service. |
What to do
- Check whether you’re in it.Search your email address on Have I Been Pwned. It tells you which breaches it appears in, ZAP-Hosting among them, without showing the data.
- Distrust messages that mention ZAP-Hosting.Scammers use breach data to sound genuine. Don’t click links in emails or texts about the breach; go to the site yourself.
- Put a PIN on your phone account.Ask your mobile provider for a port-out PIN, so no one can move your number to their SIM.
Timeline
- : the breach, as best it can be dated.
- : Have I Been Pwned verifies the data and adds it to its search, 4 months later.
Similar breaches
Breaches that leaked the same kinds of data, closest in time:
- Domino's India, March 2021, 23 million accounts
- Epik, September 2021, 15 million accounts
- Imavex, August 2021, 878,209 accounts
- Bonobos, August 2020, 2.8 million accounts
- PayHere, March 2022, 1.6 million accounts
- Slickwraps, February 2020, 857,611 accounts
See Breaches for all 618, and Updates for keeping your devices patched.
References
- ^ Troy Hunt. “ZAP-Hosting”, Have I Been Pwned, added 19 Mar 2022. Breach data licensed CC BY 4.0.
External links
- Have I Been Pwned, to check your email address
- zap-hosting.com, ZAP-Hosting’s website