Freecycle 2023 Data Breach: Email Check

Freecycle's official notice says usernames, user IDs, email addresses, and passwords were involved. The organization said it closed the breach and reported it to the relevant privacy authorities.

Independent reporting described the passwords as hashed and reported that a forum user had offered Freecycle data for sale before the public notice. Freecycle said no other personal information was compromised.

Freecycle has not published an exact unique affected-person total. A forum seller claimed that the dataset contained more than seven million user records, but the organization did not validate that figure as a count of affected people.

The 2,508,500 figure shown by LeakData is the number of unique email identifiers admitted as complete email fields in the reviewed local archive; it is not a unique-person count. Two independent parsers produced the same result. The correction removed 48 historical relations extracted from within larger field values without whole-field authority, and no external count was fitted.

Freecycle members should change their password and update any other account where the same password was reused. A unique password for every service and multi-factor authentication where available reduce the risk of credential-stuffing attacks.

Members should also be alert to phishing and unsolicited email after the breach, verifying unexpected links and attachments through an official channel before opening them.