Home chevron_right Recent Breaches chevron_right Elanic

Elanic

MEDIUM RISK

Data breach — January 2018

In January 2020, the Indian fashion marketplace Elanic had 2.8M records with 2.3M unique email addresses posted publicly to a popular hacking forum. Elanic confirmed that they had "verified the data and it was pulled from one of our test servers where this data was exposed publicly" and that the data was "old" (the hacking forum reported it as being from 2016-2018). When asked about disclosure to impacted customers, Elanic advised that they had "decided to not have as such any communication and public disclosure".

search Check if you were affected — free

2.3M

Records exposed

2018

Year of breach

Data types exposed

Free

To check your email

Data exposed in this breach

mailEmail addresses infoGeographic locations personUsernames

What happened in the Elanic data breach?

The exposed data included 3 types of personal information. Learn more about what a data breach means for you.

Quick answer — was Elanic hacked?

Yes. Elanic was breached in January 2018. The breach exposed 2,325,283 records including email addresses, geographic locations, usernames. This breach has been independently verified. If your email was involved, your data may still be at risk today. Check if you were affected.

Why was the Elanic breach so dangerous?

The Elanic breach exposed 2,325,283 records — that is 2.3M people whose personal data is now circulating on the dark web. The combination of email addresses, geographic locations, usernames makes this a medium-risk breach that should be addressed promptly.

Don't wait to find out — check if your email was exposed in this breach now.

What data was stolen in the Elanic breach?

warning

Email addresses — used for phishing attacks and credential stuffing against your other accounts

warning

Geographic locations — may be combined with other breach data to build a profile for targeted attacks

warning

Usernames — used to build profiles and target you with personalised scams

Is the Elanic breach still dangerous in 2026?

Yes. Stolen data from the Elanic breach remains dangerous years after the incident. Research shows that over 65% of stolen credentials from older breaches have never been changed by the account holders. Attackers routinely compile data from multiple breaches to build complete profiles, and credentials from 2018 are still actively used in credential stuffing attacks today.

Personal information like email addresses, phone numbers, and dates of birth never expire. Even if you changed your Elanic password, the other exposed data can be combined with information from other breaches to target you. Learn more about how long stolen data stays dangerous.

Frequently asked about the Elanic breach

How many people were affected by the Elanic data breach? expand_more

Approximately 2,325,283 user records were exposed in the Elanic breach in January 2018.

Is the Elanic breach still a risk in 2026? expand_more

Yes. Leaked credentials are actively used in credential stuffing attacks years after a breach. If you reused your Elanic password elsewhere and haven't changed it, those accounts remain at risk today.

How do I know if my email was in the Elanic breach? expand_more

Enter your email in the free checker on EmailLeaked. We scan 12 billion+ breach records including the full Elanic dataset and tell you instantly whether your email was exposed and what data was taken.

What should I do if I was in the Elanic breach? expand_more

Change your Elanic password immediately, change any other account where you used the same password, enable two-factor authentication on all important accounts, and monitor for phishing emails over the next 90 days.

Who was affected by the Elanic breach?

The Elanic data breach affected approximately 2,325,283 users who had accounts with the service. While not the largest breach on record, it still represents a significant number of compromised accounts in our database of 970+ known breaches.

If you ever created an account with Elanic or used their services, your data may have been included in this breach. Check your email now to find out. You can also read our guide on what to do immediately after a data breach.

If your email was in the Elanic breach

Change your Elanic password immediately

Go to Elanic and change your password right now. Use a strong, unique password that you have never used anywhere else.

Change any account sharing that password

If you used the same password on other sites, change it on every one of them. Attackers test stolen credentials on hundreds of popular sites within hours.