The Heritage Foundation Data Breach

What happened

In July 2024, hacktivists published almost 2GB of data taken from The Heritage Foundation and their media arm, The Daily Signal. The data contained 72k unique email addresses, primarily used for commenting on articles (along with names, IP addresses and the comments left) and by content contributors (along with usernames and passwords stored as either MD5 or phpass hashes).

Exposed data

Recommended actions

• Change your The Heritage Foundation password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing The Heritage Foundation — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.