Device information leaked: what it means and what to do

Risk level: low. Can you change it: yes. Found in 31 breaches in this directory.

What this data is

Technical details an app or website recorded about your device: make and model, operating system version, screen size, language, carrier, and sometimes the device name or advertising ID.

The risk on its own

Low risk for most people. Device details cannot unlock your phone or log in to your accounts. The two things worth checking are an outdated operating system version, which points to unpatched weaknesses, and a device name like Sarah's iPhone, which gives away your first name.

The risk combined with other data

With your email and account, it helps attackers build phishing that matches the phone you actually own, and lets fraudsters imitate your device when logging in so a new device warning never fires. An advertising ID tied to your email also lets data brokers connect your app activity to your identity.

How criminals use it

  • A fake security alert names your exact phone model and asks you to install a profile or app to fix a problem.
  • A fraudster configures their own device to match yours so a login to your stolen account looks familiar to the service.
  • Your advertising ID is used to join app tracking data to your email address in a broker profile.

What to do now

  1. Update your phone and computer to the latest operating system version and switch on automatic updates.
  2. Rename devices so the name does not include your full name: on iPhone go to Settings, General, About, Name; on Android look for Device name under Settings, About phone.
  3. Delete or reset your advertising ID: on Android open Settings, Google, Ads; on iPhone open Settings, Privacy and Security, Tracking and turn off Allow Apps to Request to Track.
  4. Never install configuration profiles or apps from a pop-up or message claiming your device has a problem.

Frequently asked questions

Can someone hack my phone with my device details?

Not with the details alone. They show which known weaknesses might apply if your software is out of date, which is why updating matters.

What is an advertising ID?

A number your phone gives apps so advertisers can track activity across them. You can reset or delete it in your phone settings.

Why do apps collect device information?

For crash reports, fraud checks and compatibility, and often for advertising. Most of it is routine on its own, but it adds up.

Breaches that exposed this data

  • Addi: 2026-03-25, 35M accounts, Age groups, Credit scores, Device information, Email addresses, Government issued IDs, Income levels
  • French Citizens: 2024-09-25, 28M accounts, Device information, Email addresses, IP addresses, Names, Partial credit card data, Phone numbers
  • Mathway: 2020-01-13, 26M accounts, Device information, Email addresses, Names, Passwords, Social media profiles
  • Paidwork: 2026-03-29, 23M accounts, Bank account numbers, Dates of birth, Device information, Education levels, Email addresses, Financial transactions
  • ai.type: 2017-12-05, 21M accounts, Address book contacts, Apps installed on devices, Cellular network names, Dates of birth, Device information, Email addresses
  • SuperVPN & GeckoVPN: 2021-02-25, 20M accounts, Device information, Device serial numbers, Email addresses, Geographic locations, IMSI numbers, Login histories
  • ixigo: 2019-01-03, 17M accounts, Auth tokens, Device information, Email addresses, Genders, Names, Passwords
  • IndiHome: 2019-11-01, 13M accounts, Device information, Email addresses, Genders, Geographic locations, IP addresses, Names
  • Hathway: 2023-12-17, 4.7M accounts, Device information, Email addresses, IP addresses, Names, Passwords, Phone numbers
  • Gemplex: 2021-02-18, 4.6M accounts, Device information, Email addresses, Names, Passwords, Phone numbers
  • 17: 2016-04-19, 4.0M accounts, Device information, Email addresses, IP addresses, Passwords, Usernames
  • Dunzo: 2020-06-19, 3.5M accounts, Device information, Email addresses, Geographic locations, IP addresses, Names, Phone numbers

Tools that help

Related guides

Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.