Evite, an online invitation and event planning platform, suffered a breach when a threat actor known as GnosticPlayers accessed an inactive data storage file containing user records dating back to 2013. The breach was discovered in April 2019 after the stolen data appeared for sale on a dark web marketplace. A misconfiguration allowed direct access to the archived data. Over 100 million records were compromised, affecting both registered members and recipients of invitations sent through the platform. The exposed data included email addresses, names, passwords stored in plain text, dates of birth, phone numbers, physical addresses, and genders. Plain-text passwords are particularly serious because they can be used immediately without any additional effort to crack them. For affected users, the combination of personal identifiers and event participation data creates a detailed profile that can be used for phishing, social engineering, and identity-based fraud. Guest list data also exposes family relationships, home locations, and social connections. A security researcher discovered the dataset and alerted Evite, which then notified affected users and prompted password resets. No major regulatory enforcement action or class-action settlement has been publicly documented in connection with this incident. Anyone whose information was included should treat their email address as compromised, update passwords on any accounts where the same credentials were reused, and remain alert to targeted phishing attempts that may reference personal details like names, addresses, or event histories.

Digital invitation platforms collect organizer and guest identity, emails, event details, contact lists, RSVP status, and event-planning records tied to social gatherings and celebrations.

Evite continues to operate as a consumer event planning tool under private ownership. The platform has navigated competition from social media event features and specialized event management apps. No major organizational changes have been prominently reported in the recent period.