Flickr Notifies Users of Data Breach via Third-Party Email Service Provider Flickr, the long-standing photo-sharing platform with over 28 billion hosted images and 35 million monthly users, has alerted users to a potential data breach stemming from a vulnerability in a third-party email service provider. The incident, discovered on February 5, 2026, exposed sensitive user information, though the company confirmed that passwords and payment details were not compromised. The breach may have allowed unauthorized access to real names, email addresses, Flickr usernames, IP addresses, general location data, and account activity. Flickr acted swiftly, disabling access to the affected system within hours of detection. The exact number of impacted users and the identity of the third-party provider remain undisclosed. In notifications sent to affected users, Flickr acknowledged the incident and outlined steps to mitigate risks, including monitoring for phishing attempts and updating passwords particularly for those who reuse Flickr credentials elsewhere. The company emphasized its commitment to strengthening security measures, including a full investigation and enhanced oversight of third-party vendors. While the breach did not expose financial data, the leaked information could still pose risks for targeted phishing or identity-related attacks. Flickr has apologized for the incident and pledged to bolster its defenses to prevent future vulnerabilities.