Subway
Data breach claim reported January 22, 2024
| Data Breach Report | ||
|---|---|---|
| Victim | subway.com | |
| Claimed By | LockBit | |
| Date Discovered | Jan 22, 2024 | |
| Description | Subway is a fast food restaurant franchise that primarily sells submarine sandwiches (subs) and salads. | |
| Leak Size | Unknown |
Breach claims on this page are published by threat actors and haven't been verified by Breachsense.
Credential Exposure for subway.com
We've indexed 1,652 @subway.com accounts from external breaches, plus 21,521 credentials for subway.com itself.
Last checked Nov 1, 2026
| @subway.com addresses from external breaches | |
|---|---|
| Third-party breaches | 1,506 accounts · across 184 breaches · 1,304 with a plaintext password · most recent Dec 18, 2025 |
| Combo lists | 425 accounts · most recent Oct 31, 2026 |
| Phishing pages | 25 accounts · most recent Aug 13, 2026 |
| Passwords for subway.com accounts | |
|---|---|
| Combo lists | 14,187 logins · most recent Nov 1, 2026 |
| Infostealer logs | 8,989 logins · 5,448 infected devices · most recent Nov 1, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Check if your company's credentials have been exposed in this or other data breaches.
Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.