ShellCodeX Breach Report
Covve Data Breach
covve.com
Verified breach
Accounts exposed
22,802,117
Breach date
20 Feb 2020
Added to tracker
15 May 2020
Data classes
6
What happened
In February 2020, a massive trove of personal information referred to as "db8151dd" was provided to HIBP after being found left exposed on a publicly facing Elasticsearch server. Later identified as originating from the Covve contacts app, the exposed data included extensive personal information and interactions between Covve users and their contacts. The data was provided to HIBP by dehashed.com.
Exposed data
Email addresses
Job titles
Names
Phone numbers
Physical addresses
Social media profiles
Recommended actions
- Watch for targeted phishing emails referencing Covve — attackers weaponise breach data quickly.
- Stay alert for smishing (SMS phishing) and SIM-swap attempts using your phone number.
- Exposed identity data raises identity-theft risk — consider credit monitoring or a credit freeze.
- Check whether your email address appears in this breach on haveibeenpwned.com.
Am I affected?
Check whether your email address appears in this breach.
Check on HIBP
