Zacks Breach

In December 2022, Zacks Investment Research discovered unauthorized access to certain customer records. An internal investigation revealed that the breach occurred between November 2021 and August 2022, affecting approximately 820,000 individuals. The compromised data included full names, addresses, phone numbers, email addresses, and passwords for the Zacks.com website. In June 2023, a separate database containing information on roughly 8.8 million Zacks users emerged on a hacking forum. This dataset appeared to be older, with the most recent entry dated May 2020, suggesting it was from a prior incident. The exposed information comprised names, usernames, email and physical addresses, phone numbers, and passwords stored as unsalted SHA-256 hashes