The SpeedyPaper Data Breach Exposed 276,409 Names and Phone Numbers

HEROIC analysts identified a dataset from SpeedyPaper, a U.S.-based online academic writing service, posted to illicit channels on June 28, 2025. The dataset contains 276,409 records, each including an email address, username, first and last name, and phone number.

Why This Is Dangerous

No passwords were exposed in this particular breach, but that does not make it harmless. Attackers now have a verified list of real names paired with working phone numbers and email addresses, everything needed to run convincing phishing emails, text message scams, or phone-based social engineering attacks against people who used an academic writing service and may not expect to be targeted this way.

What Was Exposed in the SpeedyPaper Breach

• Email addresses
• Usernames
• First and last names
• Phone numbers

Why This Matters for the 276,409 People Affected

A name and phone number combination is valuable on its own for identity theft and impersonation scams, and it becomes even more dangerous when attackers cross-reference it with data from other breaches. If any of these details also appear in a leak that includes a password, attackers can combine the two into a far more convincing account takeover or fraud attempt.

How This Database Breach Happened

This incident is classified as a database breach, meaning attackers obtained a direct copy of SpeedyPaper's user records, likely through a vulnerability in the platform's web application or backend systems. The stolen data, containing real names and phone numbers rather than just login credentials, was then posted to illicit channels where it can be sold or used directly for targeted scams.

Check If You Are Affected

To find out if your email address or phone number appears in this leak or any other, run a free scan with HEROIC's breach checker, which searches a database of more than 400 billion leaked records.