# Speculation on data breach wahoofitness

**URL:** <https://wahoox.forum.wahoofitness.com/t/speculation-on-data-breach-wahoofitness/6472>\
**Category:** The Nine Hammers Tavern - General Chat\
**Created:** [January 7, 2021, 11:08am UTC](https://wahoox.forum.wahoofitness.com/t/speculation-on-data-breach-wahoofitness/6472 "2021-01-07T11:08:56Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![SantiagoB](https://sea2.discourse-cdn.com/flex020/user_avatar/wahoox.forum.wahoofitness.com/santiagob/32/768_2.png) [@SantiagoB](https://wahoox.forum.wahoofitness.com/u/SantiagoB)\
**Post date:** [January 7, 2021, 11:08am UTC](https://wahoox.forum.wahoofitness.com/t/speculation-on-data-breach-wahoofitness/6472/1 "2021-01-07T11:08:56Z")

</div>

Hi,

Is this old news, fake news or should we consider taking measures of changing passwords?

> **[Data breach broker selling user records stolen from 26 companies](https://www.bleepingcomputer.com/news/security/data-breach-broker-selling-user-records-stolen-from-26-companies/)**
>
> A data breach broker is selling the allegedly stolen user records for twenty-six companies on a hacker forum, BleepingComputer has learned.

I am not the original poster, but I found it through [reddit](https://old.reddit.com/r/bicycling/comments/kryrdf/wahoofitnesscom_data_breach_change_your_passwords/).

TIA

---

<div class="post-metadata">

**Author:** ![Chris254](https://avatars.discourse-cdn.com/v4/letter/c/9de0a6/32.png) [@Chris254](https://wahoox.forum.wahoofitness.com/u/Chris254)\
**Post date:** [February 22, 2021, 6:32pm UTC](https://wahoox.forum.wahoofitness.com/t/speculation-on-data-breach-wahoofitness/6472/2 "2021-02-22T18:32:30Z")

</div>

I very rarely use PayPal. Used it two days ago on wahoo fitness. My account is now compromised. Suspicious.

---

<div class="post-metadata">

**Author:** ![foursixnine](https://sea2.discourse-cdn.com/flex020/user_avatar/wahoox.forum.wahoofitness.com/foursixnine/32/77_2.png) [@foursixnine](https://wahoox.forum.wahoofitness.com/u/foursixnine)\
**Post date:** [February 22, 2021, 11:40pm UTC](https://wahoox.forum.wahoofitness.com/t/speculation-on-data-breach-wahoofitness/6472/4 "2021-02-22T23:40:36Z")

</div>

if you’re worried that your passwords might be leaked, I use: [https://haveibeenpwned.com](https://haveibeenpwned.com) to monitor whether or not my email(s) shows up in a database dump somewhere, firefox has also a monitoring extension.

Another trick if you have a decent email provider: use email sub addressing, on gmail works by using a dot, and for others, it’s a plus sign (myemail+thesufferfestrocks@469.icu)

I haven’t gotten any spam email via the address I use for the sufferfest though… in any case, it would be great to have some statement from Wahoo, specially because the SSO from the sufferfest, seems to use Wahoo’s backend \<.\<

---

<div class="post-metadata">

**Author:** ![SirDaveKoS](https://sea2.discourse-cdn.com/flex020/user_avatar/wahoox.forum.wahoofitness.com/sirdavekos/32/8454_2.png) [@SirDaveKoS](https://wahoox.forum.wahoofitness.com/u/SirDaveKoS)\
**Post date:** [February 23, 2021, 4:51am UTC](https://wahoox.forum.wahoofitness.com/t/speculation-on-data-breach-wahoofitness/6472/5 "2021-02-23T04:51:05Z")

</div>

I use unique email addresses for nearly every site. None associated with Wahoo Fitness or The Sufferfest are showing up in [https://haveibeenpwned.com](https://haveibeenpwned.com), and no emails to any of those addresses have been spammed. Just some evidence against a breach, or a full database breach. I’ve had accounts with both for many years.