Privacy Unpacked
Menu

Confirmed breach

Addi data breach

Country being checked · addi.com

A breach of Addi was added to Have I Been Pwned’s breach database on 18 May 2026. It affected 34,532,941 accounts. Exposed: Government ID numbers, Email addresses, Phone numbers, Names, Addresses and IP addresses and more. The breach began on 25 March 2026, 54 days before it was reported.

Status
Confirmed breach
People affected
34,532,941 accounts
Reported
18 May 2026
Breach began
25 March 2026
Time to tell
54 days (the median in California’s notices over the last year: 154 days)

What was exposed

  • Government ID numbers
  • Email addresses
  • Phone numbers
  • Names
  • Addresses
  • IP addresses
  • Age groups
  • Credit scores
  • Device information
  • Income levels
  • Latitude and longitude pairs
  • Purchases
  • Socioeconomic levels

Sources

Breach databases are read by code. · Corrections and changes

If Addi had your data

  1. Look for Addi’s own notice or letter: it should say what of yours was involved. Keep it.
  2. An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
  3. Expect scams that use your details: calls, texts or emails pretending to be Addi, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

One email to confirm first. We use your address only for this alert, and one click deletes it.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.