A breach of ADDA was added to Have I Been Pwned’s breach database on 23 November 2025. It affected 1,829,314 accounts. Exposed: Passwords and logins, Email addresses, Phone numbers and Names. The breach began on 24 March 2025, 244 days before it was reported.
Status
Confirmed breach
People affected
1,829,314 accounts
Reported
23 November 2025
Breach began
24 March 2025
Time to tell
244 days (the median in California’s notices over the last year: 154 days)
Look for ADDA’s own notice or letter: it should say what of yours was involved. Keep it.
Change your ADDA password, and the same password anywhere else you use it. Turn on two-step sign-in.
Expect scams that use your details: calls, texts or emails pretending to be ADDA, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.