BudTrader 2024 Data Breach
Platform · Cannabis marketplace and classifieds · Online listing platform · USA
BudTrader Cannabis Marketplace Breach (2024): 2.7 Million User Accounts Including Passwords Exposed
Online cannabis marketplace and classifieds platform.
Confirmed · ObscureIQ Intelligence
Breach Risk Index i
65/100
Lower riskHigher risk
High and current: recent, valuable data circulating on the dark web now.
Data Sensitivity i
RestrictedBeing associated with this breach can itself be harmful. Disclosure is limited and presence is not confirmed to unverified parties.
2.7MRecords
2024Year
The Breach Risk Index (BRI) is a proprietary 0–100 score rating how dangerous a breach is right now, based on how recently the data has been circulating on the dark web and how valuable it is to attackers.
Breach Summary
BudTrader, a now-defunct online cannabis marketplace and social platform, suffered a data breach that exposed records belonging to approximately 2.7 million users. The breach, which dates to June 2024, was posted for sale on a hacking forum the following month. The exposed data originated from a misconfiguration of the platform, and no external attacker group has been publicly attributed. The breach exposed email addresses, usernames, and WordPress password hashes. Password hashes are encoded versions of passwords that can potentially be cracked, meaning affected users who reused passwords across other sites face a real risk of account takeover. Because BudTrader served a cannabis marketplace, an industry that remains federally illegal in the United States despite state-level legalization, the exposure of user identities carries additional risks. Affected individuals could face legal scrutiny, employment consequences, or reputational harm depending on their jurisdiction and role on the platform. BudTrader made no public statements about the breach before ceasing operations, and no regulatory action or litigation has been documented in connection with the incident. Affected users should treat any passwords shared with their BudTrader account as compromised and update them immediately on any other services where they were reused. Due to the sensitive nature of the platform, this breach is not publicly searchable and is flagged for restricted disclosure.
Full threat analysis, exploitation vectors, and principal guidance below.
10 additional sections · verified field analysis · defensive doctrine
Querying breach corpus…
Cross-referencing exposed field types…
Resolving threat-actor attribution…
Compiling principal risk advisory…
2.7M records analyzed
About BudTrader
BudTrader was an online cannabis marketplace and social platform that connected buyers, sellers, and enthusiasts in legal cannabis markets across the United States. The platform operated as a classifieds-style service for cannabis products and related goods and attracted users in states where cannabis had been legalized for medical or recreational use. BudTrader has since ceased operations.
Why They Hold Your Data
Cannabis marketplaces and classifieds collect user accounts, contact details, listing activity, business relationships, and transaction-intent signals tied to cannabis products or services.
Recent Developments
BudTrader no longer operates. The platform shut down prior to the breach's public disclosure.
Data Points Exposed
3 verified field types
Email Address
Password High
Username
Breach Impact
In July 2024 data from BudTrader dating to the prior month was posted for sale on a hacking forum. The exposed dataset contained approximately 2.7 million email addresses, usernames, and WordPress password hashes. Because BudTrader served a cannabis marketplace — a legal but socially sensitive consumer category — the exposure of user accounts carries elevated privacy implications for affected individuals, which is reflected in the elevated sensitivity tier classification. BudTrader made no public statements about the incident prior to its shutdown. No regulatory action or litigation specific to this breach has been documented.
Exploitation & Downstream Threats
• Credential stuffing against reused passwords across other platforms | • Targeted phishing campaigns using exposed email addresses
Principal Risk Advisory
What this means for a principal
An intimate-data breach: preferences, orientation or explicit content linked to an identity create acute coercion and blackmail exposure. For a high-profile principal the main risk is credible impersonation and enrichment of existing exposure.
What You Should Do
- Reset any reused passwords and enable MFA on email first, then financial accounts.
- Do not use unofficial 'am I affected' lookups; several are themselves harvesting operations.
How ObscureIQ Can Help
- Corpus confirmation: determine whether and where the principal (plus household and staff) appear in this dataset and which specific fields are exposed for them.
- Exposure mapping: cross-reference the exposed identifiers against broker-available data to size and prioritize the principal's wider footprint.
- ThreatWatch tuned to this incident's identifiers and misuse pattern (impersonation and targeting patterns, not generic credential monitoring).
Protect Yourself
Protect Yourself: Limited Disclosure
Check If You’re Affected: Verification Required
Because being associated with this breach can itself be harmful, we do not confirm whether anyone appears in it to unverified parties. Verify your identity to privately check whether your own data appears in this breach or related indexes.
We will only reveal whether a specific person appears in this breach to that person.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation