Beckett Collectibles beckett.com Beckett Collectibles data breach: what happened and what to do
In November 2025, Beckett Collectibles had a data breach alongside a website defacement. Have I Been Pwned lists 1,041,238 accounts with names, usernames, email addresses, phone numbers and physical addresses. Beckett had not publicly addressed the reports, according to coverage, and a proposed class action followed.
View all 13,115 breaches- Breach date
- 9 Nov 2025
- Affected
- 1,041,238
- Data exposed
- Email addresses, Names, Phone numbers, Physical addresses, Usernames
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
What happened
In November 2025, Beckett Collectibles, the sports card and collectibles grading and marketplace business, had a data breach that came with a defacement of its website content. The stolen data was later advertised for sale and parts of it were released publicly. According to Have I Been Pwned, the first public data included more than 500,000 email addresses reportedly belonging to North American customers. A larger set of more than 1 million addresses followed the next month. Have I Been Pwned counts 1,041,238 accounts.
Coverage from Value Added Resource, a trade site for the card hobby, reported that Beckett had not publicly addressed the incident or told customers how many people were affected. A proposed class action over the breach was filed in federal court in New Mexico in August 2026. It accuses Beckett of failing to use reasonable security and to detect the intrusion quickly. The allegations haven't been proven, and Beckett had not yet responded in court at the time of the reporting. Beckett is now owned by Collectors, the parent of PSA and SGC, which are not accused of involvement.
What was exposed
The affected data includes names, usernames, email addresses, phone numbers and physical addresses. Reports of screenshots also mention billing and shipping addresses. No passwords or payment card data are listed in Have I Been Pwned's entry.
What it means for you
Collectors are a ready-made target for scammers: they spend real money, ship valuable items and often use the same email across marketplaces. A name, address, phone number and email together are enough for convincing phishing, such as a fake message about a graded card order, a shipping problem or a refund. Phone numbers also open the door to smishing (scam texts) and, in worse cases, SIM-swap attempts.
A shipping address that leaks can also be used to guess where valuable parcels are delivered, so be careful with messages that ask you to "redirect" an order or pay a fee to release a package.
Usernames matter too. If you use the same username on other card forums or marketplaces, someone can try to link the accounts and impersonate you.
What Beckett has said
Based on the sources, Beckett had not publicly confirmed the scope of the November 2025 incident. If you have a Beckett account, look for emails from the company and use its official site, not links in messages, to check your account.
What Serus does here
Leaked data can't be pulled back from the places it spreads. Serus monitors breach databases and the dark web for your email, phone and other details and alerts you when they appear in a new leak, so you find out early and know what to change.
What to do if you were in it
- 1
Expect phishing about orders and gradings
Messages that mention Beckett, a graded card, a shipment or a refund may be built from this data. Don't click links in them. Log in through the official site instead.
- 2
Watch for scam texts and calls
Your phone number and address were in the data. Treat unexpected texts about deliveries or fees as suspect and don't reply.
- 3
Change your Beckett password and any reuse
The listing doesn't include passwords, but change yours if you reuse it elsewhere, and turn on two-factor login on your email and marketplace accounts.
- 4
Check other accounts that share your username or email
If you use the same username on other collector sites, check those accounts for logins you don't recognize.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web for your email, phone and other details and alerts you when they appear in a new leak.
Frequently asked
Was I affected by the Beckett Collectibles data breach?
Search your email on Have I Been Pwned or run a free Serus scan. Have I Been Pwned lists about 1 million affected accounts.
What was exposed?
Names, usernames, email addresses, phone numbers and physical addresses, according to Have I Been Pwned.
Is there a settlement?
No settlement was reported. A proposed class action over the breach was filed in federal court in August 2026, and its allegations haven't been proven.
Should I change my password?
Passwords aren't listed in the exposed data, but changing yours is cheap. Do it if you reuse it on other sites, and use a unique one on each.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
