Young Living Essential Oils data breach: 1.1M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2024-12-19
In December 2024, data claimed to be breached from the multi-level marketing company Young Living Essential Oils was posted to a popular hacking forum. The data contained 1.1M unique email addresses alongside names, the country of the account and in many cases, their date of birth. Young Living Essential Oils did not respond to multiple attempts to contact them about the data. Exposed data: dates of birth, email addresses, geographic locations, names. The breach dates from Dec 11, 2024; Have I Been Pwned loaded it on Dec 19, 2024.
What to do
- If you had a Young Living Essential Oils account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch