Logo for Avvo

In approximately December 2019, an alleged data breach of the lawyer directory service Avvo was published to an online hacking forum and used in an extortion scam (it’s possible the exposure dates back earlier than that). The data contained 4.1M unique email addresses alongside SHA-1 hashes, most likely representing user passwords. Multiple attempts at contacting Avvo over the course of a week were unsuccessful and the authenticity of the data was eventually verified with common Avvo and HIBP subscribers.

Accounts breached: 4101101

Breached on: December 17, 2019

Exposed data: Email addresses and Passwords

Domain: avvo.com

Added on: April 15, 2022

%d bloggers like this: