Cal Spas
Data Breach on January 05, 2026
| Data Breach Report | |||
|---|---|---|---|
| Victim | calspas.com | ||
| Threat Actor | Qilin | ||
| Date Discovered | Jan 05, 2026 | ||
| Description | Cal Spas is a manufacturer of hot tubs, swim spas and outdoor home-resort products based in the USA (California), producing premium spas and related outdoor lifestyle products distributed globally through specialty dealers. | ||
| Leak Size | Unknown |
Credential Exposure for calspas.com
We've indexed 96 @calspas.com accounts from external breaches, plus 13 credentials for calspas.com itself.
Last checked Aug 16, 2026
| @calspas.com addresses from external breaches | |
|---|---|
| Combo lists | 67 accounts · most recent Aug 7, 2026 |
| Third-party breaches | 52 accounts · across 29 breaches · 47 with a plaintext password · most recent Aug 18, 2024 |
| Passwords for calspas.com accounts | |
|---|---|
| Combo lists | 13 logins · most recent Aug 7, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Cal Spas was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.