On February 26, 2024, 20 million Cutout.Pro users learned that their accounts had been exposed in a breach first catalogued by Have I Been Pwned. The AI-powered visual design platform, used by individuals and small creative businesses worldwide, had its database compromised sometime prior, with the stolen material — including email addresses, names, IP addresses, and salted MD5 password hashes — later distributed on a popular hacking forum and across Telegram channels.
Named in this incident?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 582 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
Confirmed Breach Details
The primary disclosure on Have I Been Pwned states that the incident occurred in February 2024 and affected approximately 20 million records. Exposed information includes full names, email addresses, IP addresses, and passwords stored as salted MD5 hashes. The listing does not specify the exact intrusion method or whether the attacker achieved initial access through a vulnerability, stolen credentials, or misconfigured cloud storage. It also does not indicate whether any ransom was demanded or paid. The data was not limited to a single system; the breach appears to have reached the central user database that powers account logins and profile information across the platform.
Why This Matters for You and Your Family
If you have ever used Cutout.Pro to remove backgrounds from images, generate design assets, or create marketing visuals, your real name, email, and password hash are now in circulation. Salted MD5 hashes, while not plaintext, can still be cracked with modest computing resources, especially when users rely on common passwords. An exposed IP address further narrows down your likely geographic location at the time of registration or last login. For families, this risk multiplies when the same email or password is reused for online shopping, children’s school accounts, or family photo storage. Once criminals obtain even partial identity details, they can combine them with information from earlier breaches to build a more complete picture of your household.
Doxxing and Identity-Chain Risks
The combination of name, email, IP address, and cracked password creates a classic starting point for doxxing chains. Attackers can correlate the Cutout.Pro email with gaming accounts, social-media handles, or shopping profiles that share the same password or recovery address. A single cracked password often leads to account takeover on other services, which then yields home addresses, phone numbers, or linked payment methods. Children’s gaming accounts are particularly vulnerable because parents frequently reuse credentials across adult creative tools and family-oriented platforms. The public distribution on hacking forums and Telegram means multiple actors now have access, increasing the chance that your information will surface in targeted harassment, identity theft, or spear-phishing campaigns months or even years later.