What happened
Scribd, Inc., the company behind Scribd, Slideshare, Everand and Fable, says an unauthorized third party got into its systems, moved to other internal systems and accessed user information. Scribd says it shut the access down, closed the hole, brought in outside forensics and told law enforcement and data protection regulators. Notices are going out in phases by email from Epiq, Scribd's notification partner. Scribd has not said how many accounts were hit.
What data was exposed
For most accounts, Scribd says it was basic account info. For a smaller group, notices list email address; last 4 digits of the card, card issuer, card country and expiry date; payment history (not full card details); and some reports also mention titles read or searched.
Full card numbers and passwords are not listed in the notices. Scribd says it has no evidence the data has been misused.
What to do now
- 01Reset your password on Scribd, Slideshare, Everand and Fable, and anywhere else you reused it.
- 02Expect phishing that uses your real email and the last 4 of your card to look legit. Scribd says it will never ask for your password by email or text. Type the site address yourself instead of clicking links.
- 03Watch your card statement for small test charges. The last 4 plus expiry is not enough to charge you, but it makes a your payment failed scam more convincing.
- 04Got an old Slideshare account you forgot about? Log in and delete it, or at least change the password.
How to check if you were affected
Look for a Notice of Security Incident email sent on behalf of Scribd by Epiq. Check spam too.
Have I Been Pwned is free and will show it if this dataset gets loaded there.
OSINT Pro's email lookup shows where your email already turns up in known breach and stealer log data, so you can see what a phisher might already know about you. We are not claiming to have the Scribd dataset itself.