Purchasing habits leaked: what it means and what to do

Risk level: low. Can you change it: yes. Found in 1 breaches in this directory.

What this data is

An analysed profile of your shopping behaviour, such as favourite categories, spending level, how often you buy and which offers you respond to, built from loyalty and marketing data.

The risk on its own

Purchasing habits are low risk in security terms because they contain no payment data or login details. They are mostly used for marketing. Some inferred habits can still reveal sensitive facts, such as pregnancy, health conditions or financial stress.

The risk combined with other data

With your name and contact details, a habits profile helps scammers send offers you are likely to fall for. Deal seekers get fake discount sites, luxury buyers get fake designer offers, and frequent online shoppers get fake delivery notices. It also enriches data broker profiles about you.

How criminals use it

  • A fake sale website advertises heavily discounted products in the exact categories you buy most.
  • Someone who often buys online receives a steady stream of convincing fake delivery texts.
  • An inferred pregnancy or health condition from shopping patterns is used for targeted marketing you did not agree to.

What to do now

  1. Be sceptical of deals that match your interests unusually well, especially from sites you have not used before.
  2. Review loyalty program privacy settings and opt out of marketing profiling where possible.
  3. Turn off personalised ads in your Google and Meta ad settings.
  4. Send an access or deletion request to the loyalty program if you want your profile removed.

Frequently asked questions

Is my shopping profile dangerous?

Not in the way a password leak is. It mainly makes marketing and scams better targeted.

How do companies know my buying habits?

From loyalty cards, online accounts, payment data and tracking. They combine these into a profile to predict what you will buy.

Can I stop companies profiling me?

You can reduce it by opting out of personalised marketing, limiting ad tracking and using privacy rights under laws like CCPA and GDPR.

Breaches that exposed this data

  • Experian (2015): 2015-09-16, 7.2M accounts, Credit status information, Dates of birth, Email addresses, Ethnicities, Family structure, Genders

Tools that help

Related guides

Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.