Our Analysts Found 25K Meest Customer Records Leaked From a Delivery Database

HEROIC analysts identified a database breach tied to Meest, a Ukrainian logistics and parcel delivery company, surfacing on March 21, 2025. The exposed dataset contained 25,818 records pulled directly from what appears to be a customer database. The information compromised includes full names, email addresses, usernames, and phone numbers belonging to real Meest customers. Given that Meest handles shipments across Europe and beyond, the reach of this breach extends far past Ukraine's borders.

Why This Breach Puts You at Risk

Delivery companies store some of the most actionable personal data that exists. When an attacker gets your full name, email address, phone number, and username all in one record, they have everything needed to craft a convincing impersonation. They can call you pretending to be Meest support, send phishing emails about a package you're supposedly missing, or use your phone number in SIM-swapping schemes to hijack your mobile account. The combination of contact details and a real username is a particularly powerfull toolkit for social engineering.

What Was Exposed in the Meest Database Breach

• Email Address
• First Name
• Last Name
• Username
• Phone Number

Why This Matters for Meest Customers

Even without passwords in this dataset, the risk is serious. Criminals can use your email and username to attempt account takeovers on Meest's platform by triggering password resets. Your phone number opens the door to SMS phishing, also called smishing, where fake delivery alerts trick you into clicking malicious links. Your full name paired with an email address is exactly what scammers need for identity theft and finantial fraud. If you reuse your Meest username on other platforms, those accounts are now at elevated risk as well.

How a Database Breach Works

A database breach happens when an unauthorized party gains access to the backend systems that store customer information. This typically occurs through a vulnerability in the website's code, a misconfigured server, or stolen administrative credentials. Once inside, the attacker can copy thousands or millions of records in minutes without triggering obvious alarms. The data is then packaged and distributed on dark web forums or private channels where other criminals can purchase or download it. Meest's breach fits this pattern: a direct dump from a customer-facing database containing structured personal records.

Check If You Are Affected by the Meest Breach

HEROIC's free breach scanner searches across more than 400 billion compromised records, including this Meest dataset. If your email address or phone number appeared in this leak, you will know immediately. Enter your information at HEROIC's breach check tool and take the first step toward protecting your accounts and your identity before someone else acts on your data.