Elanic Data Breach

What happened

In January 2020, the Indian fashion marketplace Elanic had 2.8M records with 2.3M unique email addresses posted publicly to a popular hacking forum. Elanic confirmed that they had "verified the data and it was pulled from one of our test servers where this data was exposed publicly" and that the data was "old" (the hacking forum reported it as being from 2016-2018). When asked about disclosure to impacted customers, Elanic advised that they had "decided to not have as such any communication and public disclosure".

Exposed data

Recommended actions

• Watch for targeted phishing emails referencing Elanic — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.