Chatbooks Data Breach (2020): What Was Exposed & What To Do
SourceBreach data provided in part by Have I Been Pwned, used under CC BY 4.0.
The Chatbooks Data Breach (2020) (reported March 26, 2020) exposed Email addresses, Names, Passwords and Phone numbers belonging to roughly 2.5M people. If you have an account with them, your information may now be circulating on the open web and with data brokers. Here’s exactly what happened, how to check if you were affected, and what to do next.
Breaking down the breach
The breach involved 15 million user records, including 2.5 million unique email addresses. Exposed data types included names, phone numbers, social media profiles, and salted SHA-512 password hashes. The incident was reported on March 26, 2020. Specific details on the timing, scale beyond these figures, or the method of compromise remain undisclosed in available reports.
How a breach like this happens
Breaches affecting online services often result from vulnerabilities in systems that store user data. Attackers may exploit weaknesses in authentication, third-party integrations, or unpatched software to gain access to databases. Once obtained, the data can be packaged and offered on underground markets.
About Chatbooks
Chatbooks operates as a service that allows users to create and order printed photo books from their digital images. Companies in this sector routinely collect contact information, account credentials, and links to social media accounts to facilitate personalization and delivery of physical products.
A compromise at such a provider is consequential because it can affect a broad user base that has entrusted the service with both personal identifiers and media-related data.
What data was at risk
The reported breach named several categories of information as exposed: email addresses, names, passwords, phone numbers, and social media profiles. The records also contained salted SHA-512 password hashes. Exact confirmation of additional data types is not provided in the available facts.
What's at stake
For individuals, exposure of this information can lead to risks such as phishing attempts or attempts to access linked accounts. For the organization, the incident underscores the challenges of securing customer data in a competitive consumer services environment.
If your data was in this breach
Individuals concerned about potential exposure should monitor their accounts for unusual activity and consider updating passwords, especially where reuse across services has occurred.
- Change passwords for affected accounts and enable multi-factor authentication where available.
- Review linked social media profiles for any signs of unauthorized use.
- Run a free exposure scan of your email address through known breach databases to check status.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
MEO Data Breach (2020)NetGalley Data Breach (2020)MMG Fusion Data Breach (2020)DriveSure Data Breach (2020)Latest breaches
Read GalaxyWarden’s full analysis of the Chatbooks Data Breach (2020) →
Verified breach. Breach data provided in part by Have I Been Pwned, used under CC BY 4.0.
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.