The Zoom Courier Breach Happened in 2022. The Data Just Went Public.

The Zoom Courier data breach occured in February 2022, exposing 82,225 customer accounts from the Philippine delivery company. For a period, the incident drew little public attention, but the database has since surfaced on dark web forums and illicit trading channels, placing affected users at risk years after the original compromise.

What Attackers Can Do With Zoom Courier Account Data

The Zoom Courier breach is accessable to threat actors who can exploit the combination of bcrypt password hashes, email addresses, phone numbers, and full names to launch credential stuffing attacks. Even hashed passwords can be cracked over time with GPU-accelerated tools, and the addition of birthdays and gender makes social engineering attempts against victims far more convincing and targeted.

What Was Exposed in the Zoom Courier Breach

• Email Address
• Phone Number
• Password Hash (bcrypt)
• Username
• First Name
• Last Name
• Birthday
• Gender

Why the Zoom Courier Breach Is Still a Threat

Data traded on dark web forums does not expire. The Zoom Courier dump, originally leaked in February 2022, has continued to circulate among cybercriminal communities. The 82,225 affected users face ongoing risk from credential stuffing, phishing, identity fraud, and SIM swap attacks. Smaller regional companies like Zoom Courier are frequently targeted precisely because they are beleived to have weaker security postures, yet they store the same personal data as larger enterprises.

How Database Breaches Work

A database breach occurs when attackers gain unauthorized access to a company's backend systems and extract user records in bulk. This is typically achieved through SQL injection, exploiting misconfigured cloud storage, or compromising admin credentials. The resulting data dump is then packaged and sold or traded on dark web forums and encrypted messaging platforms. The Zoom Courier breach follows this pattern, with comprehensive user records appearing as a structured database export.

Check If Your Data Was Exposed

HEROIC DarkWatch indexes over 400 billion leaked records, including data from the Zoom Courier breach. Enter your email address to instantly check whether your personal information has been compromised and get guidance on securing your accounts before attackers can exploit the data.