DataCamp Data Breach

What happened

In December 2018, the data science website DataCamp suffered a data breach of records dating back to January 2017. The incident exposed 760k unique email and IP addresses along with names and passwords stored as bcrypt hashes. In 2019, the data appeared listed for sale on a dark web marketplace (along with several other large breaches) and subsequently began circulating more broadly.

Exposed data

Recommended actions

• Change your DataCamp password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing DataCamp — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.