Fishbrain

fishbrain.com · social media

What you type is a fraction of the profile. What you do on other sites reports back, and the platform works out the rest for itself. Deleting the profile closes the account, and there is no fixed end to any of it: a suspended account's email and phone number can be kept indefinitely.

Reported incidents

User details and crackable password hashes taken from the fishing app

2026-09-01

Affected Fishbrain user data environment

Fishbrain, a Stockholm company whose app lets anglers log catches and find fishing spots, sent users a breach notice dated 1 September 2026 and filed it with the California Attorney General. It found on 19 August that an outsider had got into an environment holding user data, with access going back as early as 30 July. The data included names, email addresses, phone numbers, usernames, country, dates of birth, password hashes and salts. Fishbrain said some of the hashes may be susceptible to being decoded. It patched the flaw, reset affected passwords and ended active sessions. It has not said how many users were affected.

People affected typically ask Fishbrain to confirm whether their information was included, and which categories.

The verified route

support@fishbrain.com
Privacy Recommended

DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.