Loozap Alleged Data Exposure
The 2025 Loozap data breach occurred in December 2025 when the backend databases of Loozap (loozap.com), a major pan-African online classifieds and social networking platform, were breached and published online.
Exposed Data Types
9- Email addresses
- Names
- Passwords
- Phone numbers
- Usernames
- Genders
- Dates of birth
- IP addresses
- Website activity
About This Record
What information was compromised in the Loozap incident?
The leaked MySQL database dumps (lara237users.sql, Wo_Users.sql, DBlistings360_osclass777.sql, etc.) contain extensive user profiles and classified advertisement records. Verified exposed data classes include:
- Identity & Contact Details: Full names, usernames, registered email addresses, and phone numbers.
- Authentication Credentials: Bcrypt and SHA-1 password hashes, along with password reset tokens.
- Demographic & Profile Data: Genders, dates of birth, profile photos, and country/location codes.
- Network & Activity Records: Registration and last login IP addresses, timestamps, and website activity.
How many accounts were affected?
RFC 5322 ASCII canonical verification confirmed 7,156,600 unique valid email addresses across all user tables.
Security advisory & protection measures
The exposure of usernames, email addresses, and password hashes creates risks of credential stuffing and targeted phishing. Impacted users should:
- Immediately update passwords on other services where the same credentials were reused.
- Enable two-factor authentication (2FA) wherever available and monitor for suspicious communications.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
