A hacker has leaked the account data of 12 million Zacks Investment Research users, exposing names, usernames, email addresses, phone numbers, and unsalted SHA-256 hashed passwords. The breach, allegedly from June 2024, was confirmed by Have I Been Pwned but remains unverified by Zacks. This marks the third major data breach for the company in four years.