Epik Holdings, Inc. confirmed a data intrusion on September 15, 2021, involving unauthorized access to a backup copy of domain-side service accounts on or before September 13, 2021. Affected data includes names, addresses, emails, usernames, passwords, phone numbers, VAT numbers, transaction history, domain ownership, and for some users, credit card information. Epik retained cybersecurity partners, secured services, and offered credit monitoring.