The OutGrow Breach Exposed 29,621 Customer Records and Birthdays

What HEROIC Analysts Found in the OutGrow Breach

In May 2024, HEROIC analysts identified a data breach tied to OutGrow, a United States based supplier of mushroom cultivation supplies. The breach exposed 29,621 records after the data surfaced on a public hacking forum. The compromised information includes email addresses, phone numbers, first names, last names, gender, and birthdays belonging to OutGrow customers.

Why the OutGrow Breach Is Dangerous

This is not a simple contact list. Gender and birthday are the kind of personal details often used as security questions or identity verification answers on other websites and financial accounts. Combined with a full name, email, and phone number, attackers can use this data to impersonate OutGrow customers, target them with personalized phishing emails, or attempt to reset passwords on unrelated accounts that use similar verification questions.

What Was Exposed in the OutGrow Breach

• Email addresses
• Phone numbers
• First names
• Last names
• Gender
• Birthdays

Why This Matters for OutGrow Customers

Even though no passwords were exposed here, the combination of a birthday, full name, and contact information is often enough to pass identity checks used by banks, mobile carriers, and other online services. That makes this data valuable for credential stuffing attempts, account takeover, and identity theft, especially when attackers combine it with information leaked in other breaches to build a more complete profile of a single person.

How This Database Breach Happened

This incident is classified as a database breach, meaning attackers accessed OutGrow's customer records directly, most likely by exploiting a vulnerability in the website's backend systems or an unsecured database. Unlike stealer logs, which are pulled from malware infected personal devices one at a time, a database breach exposes an entire customer table at once, which is why this leak includes such a complete set of personal details for each record.

Check If You Are Affected by the OutGrow Breach

If you have ever ordered from OutGrow, it is worth checking whether your information was part of this exposure. HEROIC's free breach scanner searches a database of more than 400 billion leaked records to show you if your information has appeared in this breach or any other. Run a free scan today to check your exposure.