The Poshmark data breach affected a significant number of users, exposing personal information that can be used for identity theft, phishing, and fraud. If you've ever had an account or relationship with Poshmark, it's worth checking whether your data was involved.
What Happened
Poshmark, the social commerce marketplace for fashion resale, disclosed a data breach in August 2019 after detecting unauthorized access to a database containing user information. Reports on the exact scope varied, with figures ranging from around 39 million to 57 million affected accounts once the stolen data appeared for sale.
What Data Was Exposed
The exposed data included usernames, first and last names, gender, city of residence, and salted and hashed passwords. Poshmark stated that full payment card and Social Security number data were not affected, as that information is stored separately.
Why This Still Matters
Even breaches from years ago remain a risk today. Stolen data is sold, traded, and reused indefinitely. Credentials from old breaches fuel credential stuffing attacks — automated attempts to reuse your email and password combination on other sites. If you reused a password anywhere, one old breach can compromise several current accounts.
How to Check If You Were Affected
Use our free breach checker below — enter your email and we'll scan it against known breach databases instantly, no signup required.
What to Do If You Were Affected
- Change any reused password immediately, starting with your most sensitive accounts.
- Enable two-factor authentication wherever it's offered.
- Monitor financial accounts closely if payment or banking data was involved.
- Watch for phishing — breach data is often used to craft convincing scam messages.
- Freeze your credit if your SSN or government ID number was exposed.
👉 Check your own exposure in 30 seconds → scan your email free.
Frequently Asked Questions
When did the Poshmark data breach happen?
Poshmark detected and disclosed unauthorized access to a database on 1 August 2019, notifying affected users shortly afterward.
What data was stolen in the Poshmark breach?
Usernames, real names, gender, city, and salted, hashed passwords were exposed. Poshmark confirmed that full payment card details and Social Security numbers were not part of the breach.
How do I check if my Poshmark account was affected?
Use the free checker at Scan My Shadow with your email address. If it appears, change your Poshmark password and enable additional security where available.
Are salted, hashed Poshmark passwords safe?
Salting and hashing makes passwords significantly harder to crack than plain storage, but weak or common passwords can still be cracked with enough computing power. Change your password if you used a weak or reused one.
What did Poshmark do after the breach?
Poshmark reset passwords for affected accounts, notified users, and worked with law enforcement and cybersecurity experts to investigate the incident.