ShellCodeX Breach Report
Hathway Data Breach
hathway.com
Verified breach
Passwords exposed
Accounts exposed
4,670,080
Breach date
17 Dec 2023
Added to tracker
12 Jan 2024
Data classes
9
What happened
In December 2023, hundreds of gigabytes of data allegedly taken from Indian ISP and digital TV provider Hathway appeared on a popular hacking website. The incident exposed extensive personal information including 4.7M unique email addresses along with names, physical and IP addresses, phone numbers, password hashes and support ticket logs.
Exposed data
Device information
Email addresses
IP addresses
Names
Passwords
Phone numbers
Physical addresses
Salutations
Support tickets
Recommended actions
- Change your Hathway password immediately, and update it anywhere you reused the same password.
- Enable two-factor authentication on the affected account and on your critical services (email, banking).
- Watch for targeted phishing emails referencing Hathway โ attackers weaponise breach data quickly.
- Stay alert for smishing (SMS phishing) and SIM-swap attempts using your phone number.
- Exposed identity data raises identity-theft risk โ consider credit monitoring or a credit freeze.
Am I affected?
Check whether your email address appears in this breach.
Check on HIBP