Flickr’s 35M Users Affected by Third-Party Data Exposure

Flickr notified users of a potential data exposure after a vulnerability was discovered in a third-party email service provider on February 5, 2026. The exposed data may include real names, email addresses, Flickr usernames, account types, IP addresses, general location, and account activity; passwords and payment card details were not affected. Flickr contained the issue by shutting down the affected system within hours, and there is currently no indication of active exploitation, though exposed contact and account metadata raises phishing and social-engineering risks.