Young Living Essential Oils data breach: what leaked and what to do
Young Living Essential Oils (youngliving.com) had a data breach on 2024-12-11 affecting 1,128,951 accounts.
!Personal data leaked
Added to the catalogue 20 Dec 2024.
What leaked
- Dates of birth
- Email addresses
- Geographic locations
- Names
What happened
In December 2024, data claimed to be breached from the multi-level marketing company Young Living Essential Oils was posted to a popular hacking forum. The data contained 1.1M unique email addresses alongside names, the country of the account and in many cases, their date of birth. Young Living Essential Oils did not respond to multiple attempts to contact them about the data.
Description from Have I Been Pwned, in its words.
What to do
- Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
- If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
- Turn on two-factor sign-in on that service and on your email.
Common questions
What leaked in the Young Living Essential Oils breach?
Dates of birth, Email addresses, Geographic locations, Names
When did the Young Living Essential Oils breach happen?
The breach date is 2024-12-11; it was added to the public catalogue on 2024-12-19.
What should I do if my staff used this service?
Warn staff about emails, texts and calls quoting the leaked details, and watch for sign-in attempts on the services they use.
Was a staff address in this breach?
Check one address free, no storage. Breach Watch checks every staff address after each new breach.