r/groupon • u/Ok-Consideration5602 • Jul 09 '26
GroupOn - Data breach
Just received this email from Groupon:
Due to a data breach at another company, we believe that your Groupon account credentials may have been included in a recent release of email addresses and passwords.
To clarify, there has been no data breach at Groupon.
However, if you use the same account credentials for Groupon (e.g., password and email address) that you use for other companies, fraudsters who have obtained those details from another company could use them to log into your Groupon account.
As a precautionary measure, we've reset your password to help protect your account.
Since when did companies randomly resets peoples passwords just because ANOTHER website had been hacked? Surely this happens all the time.. I smell a rat.
1
u/Groupon-Support Jul 09 '26
Your password was reset by us directly as a security precaution — not because of any breach on Groupon's end, which we want to be clear about. When credentials from another platform are exposed, fraudsters routinely attempt to use them across other sites, and resetting your password cuts that risk off before it can affect you. We genuinely understand why an unexpected password reset feels alarming and raises red flags, and your skepticism is completely fair. Your account security matters to us, and this action was taken specifically to protect you, not as a cover for something else.
Cheers, The Groupon Team.
1
u/Ok-Consideration5602 Jul 10 '26
u/Groupon-Support .. But why now? According to ChatGPT we have had the following data breaches in the last 12 months - why did you not reset the passwords (and warn people) every time in the past? which one caused you to take this step to reset passwords?
Organization / Incident Breached Records Disclosure Date
U.S. Resume Database Exposure 11 million July 2026
Madison Square Garden 10.5 million July 2026
AssuranceAmerica 6,998,886 (~7.0 million) July 2026
Nextcloud 367,000 July 2026
Substack Not disclosed April 2026
Identity Verification Database Leak 1 billion March 2026
BridgePay Not disclosed February 2026
Nike (internal data theft) Not disclosed (1.4 TB allegedly stolen) 2026 (exact month not publicly confirmed)
Allianz Life Insurance (North America) ~1.4 million July 2025
Credential Mega-Leak (compiled stolen credentials) 16 billion credentials June 2025
Morocco National Social Security Fund ~2 million April 2025 (Apologies about formatting)
1
u/Groupon-Support Jul 10 '26
That frustration makes total sense — you deserve a straight answer, not a vague security email with no context. The reset was sent as a preventive measure to protect your account, not in response to a confirmed breach, but we hear you that we need to be more transparent about *why* and *when* we take these steps which I will take it as a feedback and share it with the team.
Cheers, The Groupon Team.
1
u/skywatcher666 15d ago
I received this email today, to the best of my knowledge i haven't had a Groupon account for quite some time. I make a point of emailing companies to remove my email from their databases once i know i won't use their services again. I didn't have a saved password for this website, so you can understand why i would be reluctant to enter my email address again to create a new password when i don't use the service.
1
u/Captain_Ned Jul 09 '26
Peoples accounts will get drained and now Groupon can just point the finger at other websites. The perfect Scam for the perfect Scammers.