All Breaches
July 29, 2022 Unverified Retail

VapePartsMarch Alleged Data Exposure

The 2022 VapePartsMart data breach occurred in July 2022 when e-commerce databases belonging to US vaporizer parts and hardware retailer VapePartsMart (vapepartsmart.com / vpm.com) were compromised and leaked online.

140.9 Thousand
Email Identifiers
5
Data Types
High
Exposure Scope
Oct 10, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

5
  • Email addresses
  • Names
  • Physical addresses
  • Phone numbers
  • Purchase histories

About This Record

What information was compromised in the VapePartsMart incident?

The leaked WooCommerce MySQL database dump encompasses over 1.7 million customer transaction and order rows. Verified data classes include:

  • Personal & Contact Details: Customer full names, shipping and billing addresses, telephone numbers, and primary email addresses.
  • Order & Purchase Histories: Hardware product selections, payment amounts, invoice summaries, and customer lookup IDs.
  • Account Telemetry: WordPress and WooCommerce registered user profile metadata.

How many accounts were affected?

Standardized RFC 5322 ASCII canonical verification confirmed 140,854 unique valid email addresses across 1.76 million order transaction records.

Security advisory & personal identity protection

The combination of customer physical addresses, order histories, and contact information elevates the risk of targeted package delivery smishing and impersonation scams. Affected individuals should:

  • Exercise caution regarding unsolicited emails or SMS alerts regarding unexpected parcel deliveries or order issues.
  • Maintain distinct passwords across online shopping platforms.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information