The Adecco Data Breach Quietly Exposed 3 Million Records in 2021

HEROIC analysts identified the Adecco breach, which occured in January 2021, exposing over 3,026,120 records belonging to customers primarily in South America. The compromised data included email addresses, password hashes, first names, last names, gender, and phone numbers, recieved from a database that was later sold on hacking forums.

Bcrypt Hashes and Full Identity Data Create Account Takeover Risk

With access to full names, email addresses, phone numbers, and gender alongside password hashes, attackers can mount targeted credential stuffing campaigns. Even though bcrypt slows cracking, the supporting PII makes phishing and social engineering partcularly effective against affected users.

What Was Exposed in the Adecco Breach

• Email Address
• Password Hash
• First Name
• Last Name
• Gender
• Phone Number

Why Employment Data Breaches Carry Long-Term Identity Risk

HR and staffing firms hold detailed personal profiles that go far beyond login credentials. When this data circulates on criminal forums, it fuels identity theft, account takeover, and financial fraud. Attackers can combine leaked phone numbers and names to bypass account recovery on seperate platforms, extending the damage well beyond the original breach.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a company's stored data, typically by exploiting unpatched software, stolen credentials, or misconfigured access controls. Once inside, they extract records in bulk and either sell the data on criminal marketplaces or use it directly in follow-on attacks such as credential stuffing or phishing.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches over 400 billion records to tell you instantly whether your email appears in the Adecco breach or hundreds of other known exposures. Enter your email at HEROIC.com to find out what data of yours is already out there.