Personal Data Leak Monitor

Addi data breach

34.5M accounts from Addi (addi.com) were exposed in this breach. Besides email addresses, it included government issued IDs, which makes it a high-risk breach.

Breach date
March 25, 2026
Accounts
34,532,941
Added to the database
May 18, 2026

Was your email address in this breach?

Check if your email has leaked

We display where your address leaked and what went with it. We never store the address.

We don't store your address. It is checked right here against about 1029 breaches, including this one.

What leaked

Age groupsCredit scoresDevice informationEmail addressesGovernment issued IDsIncome levelsIP addressesLatitude and longitude pairsNamesPhone numbersPhysical addressesPurchasesSocioeconomic levels

What to do now

  1. Watch for accounts or mail opened in your name; contact the issuer
  2. Do not tap links in emails claiming to be that service
  3. Expect scam emails that use your real name
  4. Be alert to fake delivery or unpaid-bill texts and calls
  5. Be careful with unexpected mail or visitors

Tools that help with this breach

Norton 360PaidVisit the official site →(opens in a new tab)ESETPaidVisit the official site →(opens in a new tab)

About this breach

In March 2026, the Colombian fintech company Addi identified unauthorised activity on its platform and advised customers that "it is possible that your personal information may have been compromised". The "pay or leak" extortion group ShinyHunters subsequently claimed responsibility and published a large trove of personal data allegedly obtained from Addi. The data included 34M unique email addresses from credit scoring requests, credit bureau records, customer identity records and email validation logs. It also contained government issued IDs (Cédula de Ciudadanía), estimated income, socioeconomic levels, purchases and other credit-related data points.

Source: Have I Been Pwned (CC BY 4.0)

Similar breaches from the same period