Reddit Data Breach
In June 2018, social news aggregation and discussion platform Reddit suffered a security incident after attackers intercepted SMS-based two-factor authentication (2FA) codes used by company employees.
Exposed Data Types
5- Usernames
- Email addresses
- Hashed passwords
- Private messages
- Forum posts
About This Breach
The intruder gained unauthorized access to internal cloud storage and source code environments, exfiltrating a complete database backup spanning Reddit's 2005 launch through 2007, along with June 2018 email digest logs. Exposed information included usernames, salted and hashed passwords, email addresses, and archived private messages. Following the breach, Reddit discontinued SMS-based 2FA across internal systems.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
