2019 — Evite: Feb–Apr 2019, 101.0M records
Data compromised
Names, emails, passwords (plain text), DOB, phones, addresses
Technical writeup
Feb–Apr 2019. Unauthorized access to inactive data storage file containing user info from 2013 and earlier. Initially estimated 10M; Have I Been Pwned confirmed 100,985,047 unique accounts. Exposed: names, usernames, emails, passwords (plain text), DOB, phone numbers, mailing addresses. No SSNs or financial data. Evite reset passwords and engaged cybersecurity firms.
Root cause
Unauthorized access to inactive storage; legacy data exposure.