Trackitt 2022 Data Breach
The 2022 Trackitt data breach occurred in July 2022, when unauthorized actors gained access to the database infrastructure of Trackitt (trackitt.com), a leading global community platform used by applicants to track United States visas, Green Cards, and immigration petitions.
Exposed Data Types
5- Usernames
- Email addresses
- Passwords
- IP addresses
- Website activity
About This Breach
The breach resulted in an unauthorized dump of the user database, subsequently circulated on cybersecurity and breach forums.
What information was affected in the Trackitt incident?
The compromised SQL dataset covers user registrations and activities up to July 8, 2022, exposing 428,360 unique user accounts. The exposed data classes include:
- Account Credentials: Usernames, email addresses, and unique user IDs.
- Authentication Data: Salted SHA1 password hashes and session keys.
- Network Metadata: Registration and last-login IP addresses, referred URLs.
- Account Activity: Account creation dates and last-access timestamps.
How many users were affected?
The validated user table backup contains 428,360 unique canonical email addresses. Independent security intelligence platforms corroborate the ~428,000 account scope.
Technical analysis and security implications
The structure of the leaked data indicates an unauthorized database export from the platform's Symfony/sfGuard user management system. While passwords were encrypted using salted SHA1 hashes rather than plaintext, legacy SHA1 remains susceptible to GPU-accelerated dictionary attacks for weaker credentials. Furthermore, because Trackitt users actively manage visa and residency paperwork, there is an elevated risk of targeted spear-phishing campaigns impersonating immigration attorneys or government consular authorities.
What actions should affected users take?
Individuals who maintained accounts on Trackitt prior to July 2022 should:
- Immediately update passwords across any services where credentials may have been reused.
- Exercise heightened vigilance regarding unsolicited communications claiming to relate to visa status or immigration petitions.
- Enable multi-factor authentication (MFA / 2FA) across all personal and professional email accounts.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
