All Breaches
May 10, 2022 Unverified Technology

ProxyScrape Alleged Data Exposure

The 2022 ProxyScrape data breach occurred in May 2022 when internal databases and transaction logs belonging to proxy infrastructure provider ProxyScrape (proxyscrape.com) were leaked on BreachForums by pompompurin.

63.2 Thousand
Email Identifiers
5
Data Types
Medium
Exposure Scope
Oct 10, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

5
  • Email addresses
  • Usernames
  • IP addresses
  • Purchases
  • Payment methods

About This Record

What information was compromised in the ProxyScrape incident?

The leaked dataset spans multiple operational JSON exports (accounts.json, orders.json, paddle_alerts.json, payments.json, premium.json) detailing customer accounts, active subscriptions, and billing logs. Impacted data classes include:

  • Account Identifiers: Registered customer email addresses, UUID identifiers, and proxy access API keys.
  • Subscription & Proxy Details: Purchased proxy packages (datacenter and residential), allocated quotas, expiration timestamps, and client whitelisted IP addresses.
  • Transaction & Gateway Data: Paddle and PayPal webhook event payloads, order numbers, transaction amounts, and payment timestamps.
  • Technical & Network Metadata: Originating client IP addresses, browser User-Agent strings, geographic indicators, and fraud risk scores.

How many accounts were affected?

Comprehensive aggregation and deduplication across all tables under RFC 5322 ASCII standards yielded 63,153 unique valid email addresses.

Security risks and recommendations

Exposure of proxy service credentials and whitelisted IP ranges creates risks of bandwidth hijacking, proxy abuse, and targeted credential-stuffing. Affected users should:

  • Regenerate proxy API keys and authentication credentials immediately.
  • Review whitelisted IP rules and network access restrictions.
  • Ensure passwords are unique and not shared across critical services.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information