Truthfinder

truthfinder.com

8,160,808
Exposed Records
Apr 2019
Breach Date
7 years ago
Unknown
Password Risk
Miscellaneous industry
Miscellaneous
Industry
Added to XposedOrNot on November 8, 2023 · #141 of 763 breaches by records exposed

About This Breach

Truthfinder, owned by PeopleConnect, suffered a data breach in which a 2019 backup database containing the information of millions of customers was leaked. The exposed customer information included email addresses, hashed passwords, first and last names, and phone numbers. The data was believed to have been inadvertently leaked or stolen, and included customer accounts created between 2011 and 2019.

Data Exposed

Email addresses
Names
Passwords

Breach Details

Breach Type Data Breach
Searchable Yes
Verified Yes
Sensitive Data No
Reference https://www.bleepingcomputer.com/news/security/truthfinder-instant-checkmate-confirm-data-breach-affecting-20m-customers/ (opens in new tab)

Frequently Asked Questions

When did the Truthfinder data breach happen?

Truthfinder was breached in Apr 2019. The breach was added to the XposedOrNot index on November 8, 2023.

How many records were exposed in the Truthfinder breach?

8,160,808 records were exposed, making it the #141 largest of the 763 breaches in our index.

What data was exposed in the Truthfinder breach?

The exposed data includes: Email addresses, Names, Passwords.

What should I do if I was affected by the Truthfinder breach?

Change your password on the affected service (and anywhere you reused it), turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.

What Should You Do?

Urgent

Change Your Passwords

Update your password immediately, using 12+ characters with numbers and symbols.

High Priority

Enable Two-Factor Authentication

Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.

Recommended

Monitor Your Accounts

Set up login alerts and review account activity regularly for suspicious access.

Best Practice

Use a Password Manager

Never reuse passwords: use a password manager to generate unique ones for each account.