Customer service records leaked: what it means and what to do
Risk level: medium. Can you change it: no. Found in 3 breaches in this directory.
What this data is
The notes, tickets and transcripts support staff created about you: problems you reported, verification details you gave, refunds, account changes and sometimes internal comments.
The risk on its own
Support records often hold more than people expect: the answers you gave to prove your identity, the last digits of cards, addresses you asked to change and notes about the account. That makes them more dangerous than a general contact log. Internal staff comments can also be embarrassing if published.
The risk combined with other data
With your name and phone number, a ticket history gives an impersonator the exact facts support agents check. That is how SIM swaps, email address changes and delivery redirects get pushed through by phone. If the records include ID you uploaded for verification, treat the breach as an ID document leak.
How criminals use it
An attacker calls support as you, repeats the verification answers recorded in an old ticket and has the account email changed.
Someone uses notes about a past SIM or device replacement to request another one in your name.
ID documents attached to a support ticket are reused for identity checks elsewhere.
A fake support agent emails you quoting your real ticket number and asks you to log in through a link.
What to do now
Change every verification answer, account PIN or passphrase you ever gave to that company's support team.
Ask the company to add a note requiring extra verification, such as an in app confirmation, before any change to your account.
If you uploaded ID documents to a support ticket, follow the steps for leaked government IDs and ask for those files to be deleted.
Ignore emails that quote ticket numbers and ask you to log in, and open the company's app or website directly instead.
Set a port out PIN or number lock with your mobile carrier, because support records are a common route to SIM swaps.
Frequently asked questions
What is in a customer service record?
Usually ticket notes, chat transcripts, the reason you made contact, verification details you gave and changes staff made to the account. Some include files you attached.
Why should I change my security answers?
Because the answers you gave support may be written in the ticket, and anyone reading the leak can now repeat them to an agent.
Can support staff be tricked even if my password is strong?
Yes. Phone and chat support can reset a password or change a phone number, which is why an account PIN and extra verification notes matter.
Breaches that exposed this data
Madison Square Garden Sports: 2026-06-05, 9.8M accounts, Customer service records, Email addresses, Names, Phone numbers, Physical addresses
Odido: 2026-02-12, 6.1M accounts, Bank account numbers, Customer service records, Dates of birth, Driver's licenses, Email addresses, Genders
Aura: 2026-03-06, 903K accounts, Customer service records, Email addresses, IP addresses, Names, Phone numbers, Physical addresses
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.