← Blog

Data Breaches List of Adobe

Sun Jun 14

Share on X

Looking for a complete Adobe data breaches list? This page answers common searches like "Adobe hacked," "Adobe breach history," and "list of Adobe data breaches" with a verified timeline, record counts, root causes, and step-by-step guidance if you may have been affected.

Adobe data breach history: The 2013 Adobe breach still ranks among history’s largest—152 million customer records plus source code. BreachHistory indexes 9 verified or attested incidents tied to Adobe, spanning 2012–2026. This page is a complete, searchable timeline—not a single event—linking every catalog row with context on scale, root cause, and what users should do when a new Adobe notice drops.

Why Adobe stays on breach trackers

Global tech brands combine massive user bases, high-value intellectual property, and complex supply chains. Attackers target Adobe for credentials, source code, CRM exports, and employee directories. When you read headlines about "Adobe hacked," the incident may be a consumer PII leak, a developer artifact exposure, or a third-party SaaS tenant breach—each with different remediation steps.

Data breaches list — Adobe

Below are the major incidents in our catalog, newest first. Record counts use company, regulator, or Have I Been Pwned attestation where available; actor-only marketing shows as "Unverified / not disclosed."

Biggest and most consequential incidents

2014 — Adobe: Sep 17th 2013, 152.0M records

Sep 17th 2013. Hackers obtained access to a large swathe of Adobe customer IDs and encrypted passwords & removed sensitive information (i.e. names, encrypted credit or debit card numbers, expiration dates, etc.). Approximately 38 million Adobe customers. Updated: Now 152m (May 2014) Full incident record →

2013 source code and user data breach

Attackers breached Adobe's network and stole source code for multiple products and encrypted customer password hashes. Many hashes were weak (reversible) and user data was exposed. Full incident record →

2013 — Adobe: Sep 17th 2013, 36.0M records

Sep 17th 2013. Hackers obtained access to a large swathe of Adobe customer IDs and encrypted passwords & removed sensitive information (i.e. names, encrypted credit or debit card numbers, expiration dates, etc.). Approximately 36 million Adobe customers were involved: 3.1 million whose credit or debit card information was taken and nearly 33 million active users whose current, encrypted passwords were in the database taken. Correction Jan 2015: we previously reported 152m records were taking, but the remainder affe… Full incident record →

2026 Adobe — alleged BPO path to ~13M support tickets + ~15k staff rows (“Mr. Raccoon”; early Apr)

In early April 2026, security blogs and trade outlets (Cybernews, SecurityOnline, Cyberpress, and others) summarized a threat-actor narrative attributing a very large support-ticket exposure to Adobe via a compromised India-based business-process outsourcing (BPO) partner and weak ticketing export controls, with monikers such as “Mr. Raccoon” appearing in coverage. Journalists emphasized screenshots of SharePoint/OneDrive-style contexts and unauthenticated bulk export claims; Adobe had not universally issued a deta… Full incident record →

By the numbers (catalog snapshot)

  • 9 incidents indexed under Adobe on BreachHistory
  • 239.2M+ combined attested records across rows with disclosed numerators (many incidents overlap or count emails—not unique people)
  • 2014 — year of the largest attested row in our catalog

Patterns in Adobe's breach history

  • Credential and session theft — Phishing, stuffing, and OAuth token abuse recur across tech platforms.
  • Cloud misconfiguration — S3 buckets, misconfigured APIs, and file shares expose data without a traditional "hack."
  • Extortion without precise counts — Ransomware and leak-site actors often publish before victims confirm scope.
  • Supply-chain spillover — npm, SDK, and CRM tenant breaches affect Adobe customers even when corporate HQ databases stay intact.

What to do if you used Adobe

  1. Enable multi-factor authentication on every Adobe account and linked SSO identity.
  2. Check Have I Been Pwned when new Adobe headlines appear.
  3. Rotate passwords that were reused on email, banking, or work SSO.
  4. Watch for phishing that cites real breach details (order numbers, usernames) to appear legitimate.
  5. Follow official Adobe security communications—not SMS links from unknown numbers.

Related searches

FAQ

How many data breaches has Adobe had?

BreachHistory indexes 9 verified or attested Adobe data breaches spanning 2012–2026. Counts vary when researchers merge scraping, misconfiguration, and ransomware as separate events.

What is the biggest Adobe data breach?

The largest attested incident in our catalog is 152M+ records (Adobe: Sep 17th 2013, 152.0M records). See the full timeline for sources and remediation details.

Has Adobe been hacked?

Yes — Adobe appears on breach trackers with 9 indexed incidents including Adobe: Sep 17th 2013, 152.0M records. This page links every catalog row with primary sources and what users should do if affected.

Does Adobe send data breach notifications?

Regulated markets require consumer notices for many PII events. Not every source-code or scraping story triggers email alerts—read each incident row for notification status.

Explore every Adobe incident on BreachHistory

Browse the full catalog: Adobe breach records

Compiled from BreachHistory data/breaches.json and primary sources linked on each incident page. Updated 2026-06-15.