Zomato Data Breach
The Zomato data breach affected 16,472,873 unique email addresses in May 2017 and included usernames and salted password hashes. A password hash was not necessarily present on every account row.
Exposed Data Types
3- Email addresses
- Passwords
- Usernames
About This Breach
The recorded hashes were salted MD5 values. They are not plaintext passwords, but MD5 is weak by current password-storage standards. Zomato said passwords for Google or Facebook social sign-in accounts were not held by Zomato, and payment information was kept in a separate vault; payment-card data is not a confirmed class for this incident.
A match means that the email address appears in the verified Zomato dataset; it does not prove that a password was recovered or that payment information was exposed. Replace passwords reused around 2017 and review connected apps and active sessions on social-login accounts.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
