ZAP-Hosting data breach: what leaked and what to do

ZAP-Hosting (zap-hosting.com) had a data breach on 2021-11-22 affecting 746,682 accounts.

Personal data leaked

Added to the catalogue 20 Mar 2022.

What leaked

  • Browser user agent details
  • Chat logs
  • Email addresses
  • IP addresses
  • Names
  • Phone numbers
  • Physical addresses
  • Purchases

What happened

In November 2021, web host ZAP-Hosting suffered a data breach that exposed over 60GB of data containing 746k unique email addresses. The breach also contained support chat logs, IP addresses, names, purchases, physical addresses and phone numbers.

Description from Have I Been Pwned, in its words.

What to do

  • Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
  • If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
  • Turn on two-factor sign-in on that service and on your email.

The full guide: a staff email appears in a breach

Common questions

What leaked in the ZAP-Hosting breach?

Browser user agent details, Chat logs, Email addresses, IP addresses, Names, Phone numbers, Physical addresses, Purchases

When did the ZAP-Hosting breach happen?

The breach date is 2021-11-22; it was added to the public catalogue on 2022-03-19.

What should I do if my staff used this service?

Warn staff about emails, texts and calls quoting the leaked details, and watch for sign-in attempts on the services they use.

Was a staff address in this breach?

Check one address free, no storage. Breach Watch checks every staff address after each new breach.