Data breach
Adobe data breach
In 2013, Adobe suffered a data breach affecting 139,989,245 records. Exposed data included username, email address and password.
Breach date
140 million
Records in the breach
3
Types of data exposed
Were you affected by the Adobe breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Adobe breach
- Username
- Email Address
- Password
About the breach
The most notable recent security incidents and historical data breaches involving Adobe include:
April 2026 Adobe Data Breach (Third-Party Supply Chain)
• Incident: An attack linked to ShinyHunters via a third-party partner, AppsFlyer (marketing analytics access).
• Exposed Data: Approximately 13 million customer support tickets (including PII and communications), 15,000 employee records, internal company documents, and bug bounty submissions with unpatched vulnerabilities.
• Response: Adobe implemented phishing-resistant multi-factor authentication (MFA), restricted personal-device access, and introduced HAR file sanitization.
October 2026 Zero-Day Vulnerability & Patches
• Incident: Adobe released emergency patches for critical security vulnerabilities, including an active zero-day flaw in Acrobat Reader (CVE-2026-34621) exploited via malicious PDFs.
• Mitigation: Organizations are advised to check the Adobe Trust Center Security Bulletins for immediate updates.
October 2013 Historic Adobe Data Breach
• Incident: A massive cyberattack compromising around 152–153 million user accounts.
• Exposed Data: Usernames, email addresses, unsalted encrypted passwords, plain-text password hints, and encrypted credit/debit card details for roughly 2.9 million accounts, alongside source code for Photoshop, Acrobat, and ColdFusion.
April 2026 Adobe Data Breach (Third-Party Supply Chain)
• Incident: An attack linked to ShinyHunters via a third-party partner, AppsFlyer (marketing analytics access).
• Exposed Data: Approximately 13 million customer support tickets (including PII and communications), 15,000 employee records, internal company documents, and bug bounty submissions with unpatched vulnerabilities.
• Response: Adobe implemented phishing-resistant multi-factor authentication (MFA), restricted personal-device access, and introduced HAR file sanitization.
October 2026 Zero-Day Vulnerability & Patches
• Incident: Adobe released emergency patches for critical security vulnerabilities, including an active zero-day flaw in Acrobat Reader (CVE-2026-34621) exploited via malicious PDFs.
• Mitigation: Organizations are advised to check the Adobe Trust Center Security Bulletins for immediate updates.
October 2013 Historic Adobe Data Breach
• Incident: A massive cyberattack compromising around 152–153 million user accounts.
• Exposed Data: Usernames, email addresses, unsalted encrypted passwords, plain-text password hints, and encrypted credit/debit card details for roughly 2.9 million accounts, alongside source code for Photoshop, Acrobat, and ColdFusion.
How to protect yourself
In order to protect yourself, we recommend the following:
1. Immediately change your passwords on the affected website, as well as any other website where you may have used the same password.
2. Download and install an Authenticator app from Google or Microsoft on your mobile device. Activate 2FA on all websites you use that permits it.
3. Purchase, install and run an Anti-Virus software, like Eset on your devices.
4. Be aware of an increase in possible spam or scam emails you may receive.
1. Immediately change your passwords on the affected website, as well as any other website where you may have used the same password.
2. Download and install an Authenticator app from Google or Microsoft on your mobile device. Activate 2FA on all websites you use that permits it.
3. Purchase, install and run an Anti-Virus software, like Eset on your devices.
4. Be aware of an increase in possible spam or scam emails you may receive.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.