Envoy
Data Breach on November 21, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | envoy.com | ||
| Threat Actor | CL0P | ||
| Date Discovered | Nov 21, 2025 | ||
| Description | Envoy is a technology company based in the USA (California) that provides a workplace solutions platform to help businesses manage visitors, desks, meeting rooms, and deliveries. | ||
| Leak Size | Unknown |
Credential Exposure for envoy.com
We've indexed 173 @envoy.com accounts from external breaches, plus 391 credentials for envoy.com itself.
Last checked Aug 16, 2026
| @envoy.com addresses from external breaches | |
|---|---|
| Third-party breaches | 165 accounts · across 28 breaches · 163 with a plaintext password · most recent Dec 18, 2025 |
| Combo lists | 135 accounts · most recent Jun 22, 2026 |
| Passwords for envoy.com accounts | |
|---|---|
| Combo lists | 264 logins · most recent Aug 15, 2026 |
| Infostealer logs | 146 logins · 127 infected devices · most recent Aug 7, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Envoy was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.