A breach of Locally was added to Have I Been Pwned’s breach database on 10 July 2023. It affected 362,619 accounts. Exposed: Financial account and card details, Passwords and logins, Email addresses, Phone numbers, Addresses and Purchases. The breach began on 1 October 2022, 282 days before it was reported.
Status
Confirmed breach
People affected
362,619 accounts
Reported
10 July 2023
Breach began
1 October 2022
Time to tell
282 days (the median in California’s notices over the last year: 154 days)
Look for Locally’s own notice or letter: it should say what of yours was involved. Keep it.
Change your Locally password, and the same password anywhere else you use it. Turn on two-step sign-in.
Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
Expect scams that use your details: calls, texts or emails pretending to be Locally, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.