Skip to main content
Public breachBreachXposedOrNot· 1 Sept 2020

Shopback

Domain: shopback.com

What happened

ShopBack is a Singapore-based online cashback platform that suffered a data breach in September 2020 exposing more than 20 million users. The breach resulted in the theft of customers' personal information, including names, email addresses, phone numbers, dates of birth, and encrypted passwords. The company stated that no credit card information or financial details were compromised in the breach. ShopBack initially reported the breach in November 2020, and it affected users in several countries, including Singapore, Malaysia, the Philippines, and Indonesia.

Breach facts

Records exposed
20,653,700
Sensitive
No
Industry
Retail
Data exposed
Email addressesPasswordsNamesPhone numbersGeographic locationsIP addresses

This page summarises publicly reported breach metadata for awareness. For account recovery or incident response, use the official guidance from the affected service.

Breach data provided by XposedOrNot.