The Drizly Breach Put 2.4 Million Stolen Names and Phone Numbers Online in 2020

HEROIC analysts identified the Drizly breach in July 2020, when the database of this U.S.-based alcohol delivery service was exposed. A total of 2,477,395 records were compromised, with leaked data including email addresses, first names, last names, IP addresses, phone numbers, birthdays, and bcrypt password hashes.

How Full Name, Phone Number, and Birthday Combinations Enable Identity Theft

When an attacker has a person's full name, birthday, phone number, and email address all together, they have everything needed to pass identity verification checks at banks, mobile carriers, and government portals. The Drizly breach is partcularly dangerous because the combination of these fields makes social engineering and SIM-swapping attacks accessable to even low-skill threat actors.

What Was Exposed in the Drizly Breach

• Email Address
• First Name
• Last Name
• IP Address
• Phone Number
• Birthday
• Password Hash

Why 2.4 Million Exposed Drizly Records Still Pose a Risk Today

The Drizly breach occured in July 2020, but the data has continued to circulate across dark web markets and Telegram channels for years. Users who have not changed their passwords or updated their contact information since 2020 remain exposed. The breadth of personal data in this breach means attackers can target victims with highly convincing phishing messages using their real name, phone, and location.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a company's stored user records, typically by exploiting vulnerabilities in web applications, APIs, or internal infrastructure. Once inside, the attacker copies and exports the database before selling or publishing the data on criminal forums.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email against more than 400 billion exposed records, including the full Drizly dataset. Go to HEROIC.com to run a free scan and see exactly what information of yours is out there.