ClickFunnels Leak: 974K Records Exposed via Third-Party

💥 Data Breach Summary

A major data leak concerning ClickFunnels has surfaced on darkforums.st, allegedly posted by hacker @Satanic. The exposed datasets include:

• Table‑1: ~514,000 unique records
• Table‑2: ~460,000 unique records
• Total: ~974,000 entries

The leak reportedly stems from a third-party integration linked to ClickFunnels. The compromised data may include emails, phone numbers, company details, and payment-related information.

---

🧩 About ClickFunnels

ClickFunnels is a popular marketing software platform that guides users through streamlined sales funnels. By offering simplified, stage-by-stage pages with fewer clickable options, the tool drives customer actions—from landing pages to final purchases.

🔍 Company Data Breach History

• Late April 2025: The hacker group “Satanic” claimed to have breached ClickFunnels via a third-party on April 29, 2025
• ClickFunnels’ response: As of early May, the company was investigating the claims—officially acknowledging the incident but not confirming a direct breach.This scenario parallels recent breaches in other services (e.g., Magento), where data was exposed through third-party.

---

⚠️ Where and How?

The leak appeared on darkforums.st, with @Satanic sharing two distinct table dumps. The information likely originated from an integrated third-party vendor—highlighting the security dangers posed by peripheral systems.

---

🔧 Recommendations for Stakeholders

For businesses and users affected:

• Immediately change passwords and enable two-factor authentication on all ClickFunnels-linked accounts.
• Monitor email and phone accounts for phishing, spam, or suspicious activity.
• Audit any third-party services connecting to ClickFunnels.

For ClickFunnels & integrations:

• Conduct a full security review of third-party access points and API connections.
• Strengthen access management, especially for vendors handling sensitive customer data.
• Update incident response plans and notify customers transparently.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.