All Breaches
February 10, 2020 Verified Sensitive Record Meal Kit Delivery

Home Chef Data Breach

The Home Chef data incident was a customer-data breach the company confirmed in May 2020. Home Chef said names, emails, phone numbers, scrambled passwords, the last four digits of payment cards, and mailing addresses were taken.

8.8 Million
Email Identifiers
8
Data Types
Critical
Severity
Oct 9, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

8
  • Email addresses
  • Geographic locations
  • IP addresses
  • Names
  • Partial credit card data
  • Passwords
  • Phone numbers
  • Physical addresses

About This Breach

TechCrunch reported the confirmation after roughly eight million records were advertised for sale. A public breach source separately reports 8,815,692 unique email addresses and the collection-level classes email, name, phone, IP, postcode or geographic location, partial card data, and bcrypt password hashes.

February 10, 2020 is an public breach source catalogue date, not a company-confirmed exact intrusion, discovery, or extraction day. The 8,815,692 unique-email count is not a count of people, customers, accounts, or raw rows. Physical or mailing addresses come from company reporting, while IP and postcode classes come from a public breach source's dataset. No field should be assumed to co-occur with every email. Partial card data means the last four digits in the reviewed reporting, not a full card, CVV, or bank account.

No Home Chef data is locally searchable. The record cannot produce a positive or negative person-level result; it cannot establish a Home Chef account, delivery address, order or food preference, payment-method ownership, password ownership, field co-occurrence, or misuse. The company said it did not store full card details; that company statement is not universal proof about every dataset variant.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information