Curaleaf
Data Breach on September 25, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | curaleaf.com | ||
| Claimed By | Miga | ||
| Date Discovered | Sep 25, 2025 | ||
| Description | Curaleaf is a cannabis company based in the USA, specializing in production, processing, and distribution of medical and recreational cannabis across multiple states. | ||
| Leak Size | Unknown |
Credential Exposure for curaleaf.com
We've indexed 77 @curaleaf.com accounts from external breaches, plus 658 credentials for curaleaf.com itself.
Last checked Oct 4, 2026
| @curaleaf.com addresses from external breaches | |
|---|---|
| Combo lists | 53 accounts · most recent Sep 28, 2026 |
| Third-party breaches | 25 accounts · across 9 breaches · 24 with a plaintext password · most recent Dec 18, 2025 |
| Passwords for curaleaf.com accounts | |
|---|---|
| Combo lists | 486 logins · most recent Oct 4, 2026 |
| Infostealer logs | 216 logins · 116 infected devices · most recent Sep 27, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Curaleaf was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.