Cal AI Data Breach and Leak (March 2026)

calai.app

2,830,009
Exposed Records
Mar 2026
Breach Date
8 months ago
Unknown
Password Risk
Information Technology industry
Information Technology
Industry
Added to XposedOrNot on March 16, 2026 · #270 of 796 breaches by records exposed

About This Breach

Cal AI, an AI-powered calorie tracking app, was breached in March 2026, exposing over 3M user records including more than 2.8M unique email addresses, names, dates of birth, genders, usernames, and linked social media profiles.

Data Exposed

Email addresses
Genders
Dates of birth
Usernames
Social media profiles

Breach Details

Breach Type Data Breach
Searchable Yes
Verified Yes
Sensitive Data No
Reference No reference available

How this data is sourced and verified

Frequently Asked Questions

How do I check if I was in the Cal AI breach?

Type your email address into the search box on our data breach check page. If it appears in the Cal AI breach, or any other, you'll see the breach name, date and what was exposed. It's free and nothing you type is stored.

When did the Cal AI data breach happen?

Cal AI was breached in Mar 2026. The breach was added to the XposedOrNot index on March 16, 2026.

How many records were exposed in the Cal AI breach?

2,830,009 records were exposed, making it the #270 largest of the 796 breaches in our index.

What data was exposed in the Cal AI breach?

The exposed data includes: Email addresses, Genders, Dates of birth, Usernames, Social media profiles.

What should I do if I was affected by the Cal AI breach?

No password was in this breach, so the main risk is phishing. Be wary of emails, calls or texts that quote these details, turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.

What Should You Do?

High Priority

Enable Two-Factor Authentication

Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.

Recommended

Monitor Your Accounts

Set up login alerts and review account activity regularly for suspicious access.