Risk level: critical. Can you change it: yes. Found in 2 breaches in this directory.
What this data is
A short numeric code used to confirm it is you, such as a card PIN, a phone carrier account PIN, a voicemail PIN, a parental control code or an app unlock code.
The risk on its own
A PIN is a secret with very few possible values, so it was already weak and now it is known. People reuse the same four or six digits for their card, phone, alarm and apps, so one leaked PIN often unlocks several things. Many PINs are also based on a birthday or year, which makes a leak confirm a pattern.
The risk combined with other data
With your name and phone number, a carrier account PIN lets an attacker pass the check that is meant to stop a SIM swap. With a stolen card or a card skim, a card PIN allows cash withdrawals. Tied to your email address, the PIN is tried against every app and account that accepts one.
How criminals use it
An attacker quotes your leaked carrier PIN to move your number to their SIM and intercept your text message codes.
A stolen wallet is emptied at an ATM because the card PIN matches the one that leaked from another service.
Your voicemail is accessed remotely with the leaked PIN, exposing messages and verification calls.
A child unlocks restricted content or makes in app purchases using the leaked parental control code.
What to do now
Change the PIN on the breached service now, and change it anywhere you used the same digits.
Call your mobile carrier and set a new account or port out PIN that is different from every other PIN you use.
Change your card PINs through your banking app or at an ATM if they matched the leaked code.
Avoid PINs based on birthdays, years or patterns such as 1234 and 0000.
Store important PINs in a password manager rather than on paper in your wallet or phone notes.
Frequently asked questions
Can someone use my card PIN without my card?
Not at a normal ATM or shop. They need the card or its data as well. Change the PIN anyway, especially if you reused it.
Why does my carrier PIN matter so much?
It is often the only thing stopping someone from porting your number, which would give them your SMS security codes.
Is a six digit PIN much safer than four?
Longer is better against guessing, but a leaked PIN is compromised whatever its length. What matters now is replacing it and not reusing it.
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.