Subway
Data Breach on January 22, 2024
| Data Breach Report | ||
|---|---|---|
| Victim | subway.com | |
| Claimed By | LockBit | |
| Date Discovered | Jan 22, 2024 | |
| Description | Subway is a fast food restaurant franchise that primarily sells submarine sandwiches (subs) and salads. | |
| Leak Size | Unknown |
Credential Exposure for subway.com
We've indexed 1,643 @subway.com accounts from external breaches, plus 19,010 credentials for subway.com itself.
Last checked Sep 20, 2026
| @subway.com addresses from external breaches | |
|---|---|
| Third-party breaches | 1,506 accounts · across 184 breaches · 1,304 with a plaintext password · most recent Dec 18, 2025 |
| Combo lists | 416 accounts · most recent Sep 18, 2026 |
| Phishing pages | 25 accounts · most recent Aug 13, 2026 |
| Passwords for subway.com accounts | |
|---|---|
| Combo lists | 12,206 logins · most recent Sep 18, 2026 |
| Infostealer logs | 8,397 logins · 5,362 infected devices · most recent Sep 20, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Subway was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.