“The 2024 breach included 12 million unique email addresses along with IP and physical addresses, names, usernames, phone numbers and unsalted SHA-256 password hashes. Zacks did not respond to multiple attempts to contact them about the incident,” it explained.

As reported by Bleeping Computer, an underground hacking forum thread from January has been discovered which claims that Zacks has fallen victim to yet another data breach. This latest breach, the third since 2022, is said to be the largest yet – with the personal information of 12 million people being leaked online.

Zacks Investment Research, a financial data, stock research, and analysis company based in Chicago, apparently suffered a cyberattack in which it lost sensitive data on millions of people. The forum thread contained a small sample, and an offer for the entire batch in exchange for a “small cryptocurrency amount”.