[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f38mf25kbcsnxq":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":7,"domain":9,"breachDate":10,"addedDate":11,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":17,"affectedCount":17,"affectedCountStatus":18,"affectedCountLowerBound":19,"affectedCountUnit":20,"hasEnglishDescription":4,"severity":21,"dataClasses":22,"description":28,"seoTitle":29,"seoTitleEn":30,"seoDescription":29,"seoDescriptionEn":31,"logoUrl":32,"isVerified":4,"isSensitive":4,"isSpamList":33,"isMalware":33,"company":34},"68e3266eda11adda48825257","kickstarter","Kickstarter 2014 Data Breach","kickstarter.com","2014-02-16T00:00:00.000Z","2017-10-06T07:29:07.000Z","2026-07-29T21:11:34.694Z","company notice and verified breach index","https:\u002F\u002Fwww.kickstarter.com\u002Fblog\u002Fimportant-kickstarter-security-notice",[14,16],"https:\u002F\u002Fwww.kickstarter.com\u002F",5176463,"known",null,"email_identifiers","Critical",[23,24,25,26,27],"Email addresses","Passwords","Usernames","Phone numbers","Physical addresses","\u003Cp>\u003Cstrong>The Kickstarter 2014 data breach\u003C\u002Fstrong> covers the incident in which the crowdfunding platform disclosed unauthorized access to some customer data. After being alerted by law enforcement, the company said it closed the breach and identified usernames, email addresses, mailing addresses, phone numbers, and encrypted passwords among the accessed data. The verified external corpus reports 5,176,463 unique email addresses. That figure is not a count of accounts, project backers, or local rows.\u003C\u002Fp>\n\n\u003Ch2>How precise are the date and event scope?\u003C\u002Fh2>\n\u003Cp>The external breach record uses February 16, 2014. Kickstarter's security notice confirms the incident and affected field categories but does not disclose when the attacker first entered the system, so the catalogue date should not be read as the initial-access date. The company said it had no evidence that credit-card data was accessed and that, at the time of the notice, it had seen unauthorized activity on only two accounts. That limited statement does not mean no data was taken or rule out later misuse.\u003C\u002Fp>\n\n\u003Cp>According to the company, older passwords were uniquely salted and repeatedly hashed with SHA-1, while newer passwords used bcrypt. These were not plaintext passwords, but they should not be treated as immune to offline guessing. Credit-card data is not retained as a structured class. Names are also omitted because the selected source set does not clearly list them as a general, verified field for this incident.\u003C\u002Fp>\n\n\u003Ch2>Why do the external and local measures differ?\u003C\u002Fh2>\n\u003Cp>The completed production email-only import processed 5,169,669 valid lines and created 5,169,660 unique email associations in the live index. The local job did not import usernames, passwords, phone numbers, or mailing addresses, so local co-occurrence of those fields is not claimed. The external unique-email measure is 6,803 above the local associations. Corpus version, normalization, and deduplication differences have not been reconciled; no cause is assigned and the figures are not added together.\u003C\u002Fp>\n\n\u003Cp>Kickstarter's current domain and incident notice remain available. An email match alone does not establish that a person created a project, backed a particular campaign, or had phone and address fields in the incident data. Anyone who may have reused the same password elsewhere should choose a unique password on that service and can use Kickstarter's current two-factor authentication and access-history features. Unexpected account or payment messages should be checked by navigating independently to the official domain rather than following the message's link.\u003C\u002Fp>","","Kickstarter 2014 Data Breach (5.2 Million Email Identifiers)","The 2014 Kickstarter breach contains 5,176,463 verified unique emails. Review five external fields and 5,169,660 local email associations.","\u002Fuploads\u002Flogo\u002Fkickstarter_com.webp",false,{"name":35,"sector":36,"country":37,"website":9,"websiteArchiveUrl":29,"websiteStatus":38,"websiteCheckedAt":39},"Kickstarter, PBC","Crowdfunding","United States","active","2026-07-29T21:09:00.000Z"]