Zacks2024

What Happened

In June 2024, the investment research company Zacks was allegedly breached, and the data was later published in a popular hacking forum. 

This comes after a separate Zacks data breach confirmed by the organization in 2023 , with the breach disclosing millions of additional records representing data from the first incident.

The 2024 breach included 12M unique email addresses along with IP and physical addresses, names, usernames, phone numbers.

How to Stay Safe

1. Change the password on your email account
Since this leak exposed email addresses, updating your email password will reduce the risk of someone trying to access your inbox. This is especially important if you use the same password on other websites. 

Follow one of our step-by-step guides depending on which email provider you use:

How to Change Your Gmail Password

How to Change Your Yahoo Password

How to Change Your AOL Password

How to Change Your iCloud Password

How to Change Your Hotmail or Outlook Password

How to Change Your Email Password (for other Email Accounts)

Then, turn on Two-Step Verification while you're there, so your account is harder to access even if your password is compromised again in the future. You’ll also find how to do that by clicking the links above.

2. Be extra careful with unexpected calls, texts, or emails about your Zacks account, investments, market updates, or financial subscriptions.

Since this leak included contact details, usernames, IP addresses, and physical addresses, scammers could use this information to sound convincing. 

Why This Breach Matters

Even though this breach happened in 2024, leaked data doesn't just expire. It keeps getting bought, sold, and reused by scammers. 

And even if you've never used this exact site before, your email may have still ended up in it through a partner, data broker, or another service behind the scenes. 

If you've ever reused this password anywhere else, it's worth taking a minute to secure it now.