Trello Data Breach

What happened

In January 2024, data was scraped from Trello and posted for sale on a popular hacking forum. Containing over 15M email addresses, names and usernames, the data was obtained by enumerating a publicly accessible resource using email addresses from previous breach corpuses. Trello advised that no unauthorised access had occurred.

Exposed data

Recommended actions

• Watch for targeted phishing emails referencing Trello — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.