S

Confirmed breach

SuperDraft data breach

Country being checked · superdraft.io

A breach of SuperDraft was added to Have I Been Pwned’s breach database on 12 January 2025. It affected 300,187 accounts. Exposed: Passwords and logins, Email addresses, Dates of birth, Usernames, Geographic locations and Latitude and longitude pairs and more. The breach began on 27 October 2024, 77 days before it was reported.

Status

Confirmed breach

People affected

300,187 accounts

Reported

12 January 2025

Breach began

27 October 2024

Time to tell

77 days (the median in California’s notices over the last year: 154 days)

What was exposed

• Passwords and logins
• Email addresses
• Dates of birth
• Usernames
• Geographic locations
• Latitude and longitude pairs
• Purchases

Sources

• Breach database · 12 January 2025 · 300,187 accountsHave I Been Pwned

Breach databases are read by code. · Corrections and changes

If SuperDraft had your data

1. Look for SuperDraft’s own notice or letter: it should say what of yours was involved. Keep it.
2. Change your SuperDraft password, and the same password anywhere else you use it. Turn on two-step sign-in.
3. Expect scams that use your details: calls, texts or emails pretending to be SuperDraft, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

• Spot the scams that use leaked data →
• If your password leaked →
• What to do after a data breach →

Email me if SuperDraft has another breach

Alert me

One email to confirm first. We use your address only for this alert, and one click deletes it.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.