Loozap.com User Database with 34k Accounts Leaked

Overview

On 28 January 2026, a DarkForums user shared a database described as belonging to loozap.com, a classifieds platform widely used in Ethiopia. The post states the dump contains 34,000 users with SHA1 password hashes.

What was published

The SQL dump sample shows records with:

• Email addresses and usernames
• SHA1 password hashes
• Full names (including Ethiopian names)
• City and address (sample shows Addis Ababa, Ethiopia)
• IP addresses and Facebook profile identifiers
• Gender, registration dates and avatar URLs

The sample records show user data from as far back as 2017.

Risks for affected individuals

• SHA1 hashes are weak against offline cracking.
• Emails, names and addresses enable targeted phishing and fraud.
• Reused passwords on other platforms are at risk.

What remains unknown

• The total number of records beyond the 34k claim.
• Whether the data is current.
• How the database was obtained.

What affected people should do

Loozap users should change their passwords immediately, avoid reusing them elsewhere, and be alert to phishing referencing classified ads or account activity.