Zoya
Data Breach on November 30, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | zoya.com | ||
| Claimed By | Qilin | ||
| Date Discovered | Nov 30, 2025 | ||
| Description | Zoya is a beauty & cosmetics company based in the USA, specializing in “clean” nail polish and nail care treatments offering long‑wearing, Big‑Free (free from common toxins) polishes and spa‑grade nail & beauty products. | ||
| Leak Size | Unknown |
Credential Exposure for zoya.com
We've indexed 35 @zoya.com accounts from external breaches, plus 53 credentials for zoya.com itself.
Last checked Oct 11, 2026
| @zoya.com addresses from external breaches | |
|---|---|
| Third-party breaches | 29 accounts · across 19 breaches · 23 with a plaintext password · most recent Oct 5, 2025 |
| Combo lists | 26 accounts · most recent Sep 13, 2026 |
| Passwords for zoya.com accounts | |
|---|---|
| Combo lists | 39 logins · most recent Oct 10, 2026 |
| Infostealer logs | 17 logins · 12 infected devices · most recent Sep 27, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Zoya was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.