Simon Property Group
Data Breach on October 30, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | simon.com | ||
| Threat Actor | Medusa | ||
| Date Discovered | Oct 30, 2025 | ||
| Description | Simon Property Group Inc. is a global real estate investment trust (REIT) based in the USA (Indiana), owning and operating premier shopping, dining, and mixed-use destinations. | ||
| Leak Size | Unknown |
Credential Exposure for simon.com
We've indexed 14,211 @simon.com accounts from external breaches, plus 471 credentials for simon.com itself.
Last checked Aug 13, 2026
| @simon.com addresses from external breaches | |
|---|---|
| Combo lists | 12,368 accounts · most recent Aug 8, 2026 |
| Third-party breaches | 2,843 accounts · across 367 breaches · 2,513 with a plaintext password · most recent Jan 25, 2026 |
| Phishing pages | 29 accounts · most recent Aug 12, 2026 |
| Passwords for simon.com accounts | |
|---|---|
| Combo lists | 312 logins · most recent Aug 8, 2026 |
| Infostealer logs | 186 logins · 145 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Simon Property Group was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.