In February 2023, The Kodi Foundation suffered a data breach that exposed more than 400k user records. Attributed to an account belonging to "a trusted but currently inactive member of the forum admin team", the breach involved the administrator account…
Tag: Have I Been Pwned latest breaches
Sundry Files – 274,461 breached accounts
In January 2022, the now defunct file upload service Sundry Files suffered a data breach that exposed 274k unique email addresses. The data also included usernames, IP addresses and passwords stored as salted SHA-256 hashes. This article has been indexed…
Leaked Reality – 114,907 breached accounts
In January 2022, the now defunct uncensored video website Leaked Reality suffered a data breach that exposed 115k unique email addresses. The data also included usernames, IP addresses and passwords stored as either MD5 or phpass hashes. This article has…
TheGradCafe – 310,975 breached accounts
In February 2023, the grad school admissions search website TheGradCafe suffered a data breach that disclosed the personal records of 310k users. The data included email addresses, names and usernames, genders, geographic locations and passwords stored as bcrypt hashes. Some…
Shopper+ – 878,290 breached accounts
In March 2023, "Canada’s online shopping mall" Shopper+ disclosed a data breach discovered on a public hacking forum. The breach dated back to September 2020 and included 878k customer records with email and physical addresses, names, phone numbers and in…
HDB Financial Services – 1,658,750 breached accounts
In March 2023, the Indian non-bank lending unit HDB Financial Services suffered a data breach that disclosed over 70M customer records. Containing 1.6M unique email addresses, the breach also disclosed names, dates of birth, phone numbers, genders, post codes and…
Eye4Fraud – 16,000,591 breached accounts
In February 2023, data alleged to have been taken from the fraud protection service Eye4Fraud was posted to a popular hacking forum. Spanning tens of millions of rows with 16M unique email addresses, the data was spread across 147 tables…
iD Tech – 415,121 breached accounts
In February 2023, the tech camps for kids service iD Tech had almost 1M records posted to a popular hacking forum. The data included 415k unique email addresses, names, dates of birth and plain text passwords which appear to have…
LBB – 39,288 breached accounts
In August 2022, customer data of the Indian shopping site "LBB" (Little Black Book) was posted to a popular hacking forum. The data contained over 3M records with 39k unique email addresses alongside IP and physical addresses, names and device…
GunAction.com – 565,470 breached accounts
In December 2022, the online firearms auction website GunAuction.com suffered a data breach which was later discovered left unprotected on the hacker’s server. The data included over 565k user records with extensive personal data including email, IP and physical addresses,…
GunAuction – 565,470 breached accounts
In December 2022, the online firearms auction website GunAuction.com suffered a data breach which was later discovered left unprotected on the hacker’s server. The data included over 565k user records with extensive personal data including email, IP and physical addresses,…
Convex – 150,129 breached accounts
In February 2023, the Russian telecommunications provider Convex was hacked by "Anonymous" who subsequently released 128GB of data publicly, alleging it revealed illegal government surveillance. The leaked data contained 150k unique email, IP and physical addresses, names and phone numbers.…
RealDudesInc – 101,543 breached accounts
In October 2022, the GTA mod menu provider RealDudesInc suffered a data breach that exposed over 100k email addresses (many of which are temporary guest account addresses). The breach also included usernames and bcrypt password hashes. This article has been…
Weee – 1,117,405 breached accounts
In February 2023, data belonging to the Asian and Hispanic food delivery service Weee appeared on a popular hacking forum. Dating back to mid-2022, the data included 1.1M unique email addresses from 11M rows of orders containing names, phone numbers…
LimeVPN – 23,348 breached accounts
In October 2020, the VPN provider LimeVPN suffered a data breach that exposed the personal information of tens of thousands of customers. The data included email, IP and physical addresses, names, phone numbers, purchase histories and passwords stored as salted…
Truth Finder – 8,159,573 breached accounts
In 2019, the public records search service TruthFinder suffered a data breach that later came to light in early 2023. The data included over 8M unique customer email addresses, names, phone numbers and passwords stored as scrypt hashes. This article…
Instant Checkmate – 11,943,887 breached accounts
In 2019, the public records search service Instant Checkmate suffered a data breach that later came to light in early 2023. The data included almost 12M unique customer email addresses, names, phone numbers and passwords stored as scrypt hashes. This…
School District 42 – 18,850 breached accounts
In January 2023, Pitt Meadows School District 42 in British Columbia suffered a data breach. The incident exposed the names and email addresses of approximately 19k students and staff which were consequently redistributed on a popular hacking forum. This article…
Planet Ice – 240,488 breached accounts
In January 2023, the UK-based ice skating rink booking service Planet Ice suffered a data breach. The incident exposed the personal data of 240k people including email and physical addresses, phone numbers, genders, dates of birth and passwords stored as…
School District 42 – 18,850 breached accounts
In January 2023, Pitt Meadows School District 42 in British Columbia suffered a data breach. The incident exposed the names and email addresses of approximately 19k students and staff which were consequently redistributed on a popular hacking forum. This article…
Planet Ice – 240,488 breached accounts
In January 2023, the UK-based ice skating rink booking service Planet Ice suffered a data breach. The incident exposed the personal data of 240k people including email and physical addresses, phone numbers, genders, dates of birth and passwords stored as…
KomplettFritid – 139,401 breached accounts
In January 2023, the online Norwegian store KomplettFritid was reported as having had a data breach dating back to February 2021. The incident exposed 140k customer records including physical, email and IP addresses, names, phone numbers and passwords. Most passwords…
Autotrader – 20,032 breached accounts
In January 2023, 1.4M records from the Autotrader online vehicle marketplace appeared on a popular hacking forum. Autotrader stated that the "data in question relates to aged listing data that was generally publicly available on our site at the time…
Zurich – 756,737 breached accounts
In January 2023, the Japanese arm of Zurich insurance suffered a data breach that exposed 2.6M customer records with over 756k unique email addresses. The data was subsequently posted to a popular hacking forum and also included names, genders, dates…
DoorDash – 367,476 breached accounts
In August 2022, the food ordering and delivery service DoorDash disclosed a data breach that impacted a portion of their customers. DoorDash attributed the breach to an unnamed "third-party vendor" they stated was the victim of a phishing campaign. The…
SlideTeam – 1,464,271 breached accounts
In April 2021, the "world’s largest collection of pre-designed presentation slides" SlideTeam had 1.4M records breached and later published to a popular hacking forum the following year. Allegedly sourced from a compromised Magento instance, the data included names, email addresses…
Twitter (200M) – 211,524,284 breached accounts
In early 2023, over 200M records scraped from Twitter appeared on a popular hacking forum. The data was obtained sometime in 2021 by abusing an API that enabled email addresses to be resolved to Twitter profiles. The subsequent results were…
Deezer – 229,037,936 breached accounts
In late 2022, the music streaming service Deezer disclosed a data breach that impacted over 240M customers. The breach dated back to a mid-2019 backup exposed by a 3rd party partner which was subsequently sold and then broadly redistributed on…
Benchmark – 93,343 breached accounts
In November 2019, the Serbian technology news website Benchmark suffered a breach of its forum that exposed 93k customer records. The breach exposed IP and email addresses, usernames and passwords stored as salted MD5 hashes. A forum administrator subsequently advised…
Gemini – 5,274,214 breached accounts
In late 2022, data allegedly taken from the Gemini crypto exchange was posted to a public hacking forum. The data consisted of email addresses and partial phone numbers, which Gemini later attributed to an incident at a third-party vendor (the…
CoinTracker – 1,557,153 breached accounts
In December 2022, the Crypto & NFT taxes service CoinTracker reported a data breach that impacted over 1.5M of their customers. The company attributed the breach to a compromise of one of their service providers and impacted data was limited…
Abandonia (2022) – 919,790 breached accounts
In November 2022, the gaming website dedicated to classic DOS games Abandonia suffered a data breach resulting in the exposure of 920k unique user records. This breach was in addition to another one 7 years earlier in 2015. The data…
Not Acxiom (unverified) – 51,730,831 breached accounts
In 2020, a corpus of data containing almost a quarter of a billion records spanning over 400 different fields was misattributed to database marketing company Acxiom and subsequently circulated within the hacking community. On review, Acxiom concluded that "the claims…
GGCorp – 2,376,330 breached accounts
In August 2022, the MMORPG website GGCorp suffered a data breach that exposed almost 2.4M unique email addresses. The data also included IP addresses, usernames and MD5 password hashes. This article has been indexed from Have I Been Pwned latest…
Lolzteam – 398,011 breached accounts
In May 2018, the Russian hacking forum Lolzteam suffered a data breach that exposed 400k members. The impacted data included usernames and email addresses which were later redistributed via another hacking forum. The data was provided to HIBP by a…
E-Pal – 108,887 breached accounts
In October 2022, the service dedicated to finding friends on Discord known as E-Pal disclosed a data breach. The compromised data included over 100k unique email addresses and usernames spanning approximately 1M orders. The data was subsequently distributed via a…
Doomworld – 34,478 breached accounts
In October 2022, the Doomworld fourm suffered a data breach that exposed 34k member records. The data included email and IP addresses, usernames and bcrypt password hashes. This article has been indexed from Have I Been Pwned latest breaches Read…
E-Pal – 108,887 breached accounts
In October 2022, the service dedicated to finding friends on Discord known as E-Pal disclosed a data breach. The compromised data included over 100k unique email addresses and usernames spanning approximately 1M orders. The data was subsequently distributed via a…
Doomworld – 34,478 breached accounts
In October 2022, the Doomworld fourm suffered a data breach that exposed 34k member records. The data included email and IP addresses, usernames and bcrypt password hashes. This article has been indexed from Have I Been Pwned latest breaches Read…
Bhinneka – 1,274,340 breached accounts
In early 2020, the Indonesian consumer electronics website Bhinneka suffered a data breach that exposed almost 1.3M customer records. The data included email and physical addresses, names, genders, dates of birth, phone numbers and salted password hashes. This article has…
Wakanim – 6,706,951 breached accounts
In August 2022, the European streaming service Wakanim suffered a data breach which was subsequently advertised and sold on a popular hacking forum. The breach exposed 6.7M customer records including email, IP and physical addresses, names and usernames. This article…
Bhinneka – 1,274,340 breached accounts
In early 2020, the Indonesian consumer electronics website Bhinneka suffered a data breach that exposed almost 1.3M customer records. The data included email and physical addresses, names, genders, dates of birth, phone numbers and salted password hashes. This article has…
TAP Air Portugal – 5,067,990 breached accounts
In August 2022, the Portuguese airline TAP Air Portugal was the target of a ransomware attack perpetrated by the Ragnar Locker gang who later leaked the compromised data via a public dark web site. Over 5M unique email addresses were…
Brand New Tube – 349,627 breached accounts
In August 2022, the streaming website Brand New Tube suffered a data breach that exposed the personal information of almost 350k subscribers. The impacted data included email and IP addresses, usernames, genders, passwords stored as unsalted SHA-1 hashes and private…
START – 7,455,386 breached accounts
In August 2022, news broke of an attack against the Russian streaming service "START". The incident led to the exposure of 44M records containing 7.4M unique email addresses. The impacted data also included the subscriber’s country and password hash. START…
Banorte – 2,107,000 breached accounts
In August 2022, millions of records from Mexican bank "Banorte" were publicly dumped on a popular hacking forum including 2.1M unique email addresses, physical addresses, names, phone numbers, RFC (tax) numbers, genders and bank balances. Banorte have stated that the…
SitePoint – 1,021,790 breached accounts
In June 2020, the web development site SitePoint suffered a data breach that exposed over 1M customer records. Impacted data included email and IP addresses, names, usernames, bios and passwords stored as bcrypt hashes. This article has been indexed from…
Twitter – 6,682,453 breached accounts
In January 2022, a vulnerability in Twitter’s platform allowed an attacker to build a database of the email addresses and phone numbers of millions of users of the social platform. In a disclosure notice later shared in August 2022, Twitter…
QuestionPro – 22,229,637 breached accounts
In May 2022, the survey website QuestionPro was the target of an extortion attempt relating to an alleged data breach. Over 100GB of data containing 22M unique email addresses (some of which appear to be generated by the platform), are…
QuestionPro (unverified) – 22,229,637 breached accounts
In May 2022, the survey website QuestionPro was the target of an extortion attempt relating to an alleged data breach. Over 100GB of data containing 22M unique email addresses (some of which appear to be generated by the platform), are…
Tuned Global – 985,586 breached accounts
In January 2021, data from a number of breached services including Tuned Global were released to a public hacking forum. The breach appears to date back to 2016 and includes 985k records containing email addresses, names, a small number of…
Mecho Download – 437,928 breached accounts
In October 2013, the (now defunct) downloads website "Mecho Download" suffered a data breach that exposed 438k records. Data from the vBulletin based website included email and IP addresses, usernames and passwords stored as salted MD5 hashes. This article has…
Battlefy – 83,610 breached accounts
In January 2016, the esports website Battlefy suffered a data breach that exposed 83k customer records. The impacted data included email addresses, usernames and passwords stored as bcrypt hashes. This article has been indexed from Have I Been Pwned latest…
Paytm – 3,395,101 breached accounts
In August 2020, the Indian payment provider Paytm was reported as having suffered a data breach and subsequent ransom demand, after which the data was circulated publicly. Although Paytm denied the breach at the time, verification with impacted HIBP subscribers…
PPCGeeks – 492,518 breached accounts
In August 2016, the pocket PC fan site forum PPCGeeks suffered a data breach that exposed over 490k records. The breach of the vBulletin forum exposed email and IP addresses, usernames, dates of birth and passwords stored as salted MD5…
JukinMedia – 314,290 breached accounts
In October 2021, the "global leader in user-generated entertainment" Jukin Media suffered a data breach. The breach exposed 13GB of code, configuration and data consisting of 314k unique email addresses along with names, phone numbers, IP addresses and bcrypt password…
Famm – 535,240 breached accounts
In late 2020, the Japanese family photos website Famm suffered a data breach that subsequently exposed 1.3M customer records, including 535k unique email addresses. Impacted data also included names, dates of birth, genders and passwords stored as SHA-256 hashes. This…
Eskimi – 1,197,620 breached accounts
In late 2020, the AdTech platform Eskimi suffered a data breach that exposed 26M records with 1.2M unique email addresses. The data included usernames, dates of birth, genders and passwords stored as unsalted MD5 hashes. This article has been indexed…
La Poste Mobile – 533,886 breached accounts
In July 2022, the French telecommunications company La Poste Mobile was the target of an attack by the LockBit ransomware which resulted in company data being published publicly. The impacted data included 533k unique email addresses along with names, physical…
Mangatoon – 23,040,238 breached accounts
In May 2022, the Hong Kong based Manga service Mangatoon suffered a data breach that exposed 23M subscriber records. The breach exposed names, email addresses, genders, social media account identities, auth tokens from social logins and passwords stored as salted…
Capital Economics – 263,829 breached accounts
In December 2020, the economic research company Capital Economics suffered a data breach that exposed 263k customer records. The exposed data included email and physical addresses, names, phone numbers, job titles and the employer of impacted customers. This article has…
Bookchor – 498,297 breached accounts
In January 2021, the Indian book trading website Bookchor suffered a data breach that exposed half a million customer records. The exposed data included email and IP addresses, names, genders, dates of birth, phone numbers and passwords stored as unsalted…
Bourse des Vols – 1,460,130 breached accounts
In January 2021, the French travel company Bourse des Vols suffered a data breach that exposed 1.46M unique email addresses across more than 1.2k .sql files and over 9GB of data. The impacted data exposed personal information and travel histories…
DivX SubTitles – 783,058 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In approximately 2010, the now defunct website DivX SubTitles suffered a data breach that exposed 783k user accounts including email addresses, usernames and plain text passwords. The data…
Adecco – 4,284,538 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In March 2021, news broke of a massive data breach impacting millions of Adecco customers in South America which was subsequently sold on a popular hacking forum. The…
MGM Resorts (2022 Update) – 24,842,001 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In July 2019, MGM Resorts discovered a data breach of one of their cloud services. The breach included 10.6M guest records with 3.1M unique email addresses stemming back…
Preen.Me – 236,105 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In May 2020, social media marketing company Preen.Me was the target of a ransom attack that resulted in hundreds of thousands of records being publicly posted. Over 236k…
Amart Furniture – 108,940 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In May 2022, the Australian retailer Amart Furniture advised that their warranty claims database hosted on Amazon Web Services had been the target of a cyber attack. Over…
Wendy’s – 52,485 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In March 2018, Wendy’s in the Philippines suffered a data breach which impacted over 52k customers and job applicants. The breach exposed extensive personal information including names, email…
SirHurt – 90,655 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In April 2021, the the Roblox cheats website SirHurt suffered a data breach that exposed over 90k customer records. The exposed data included email and IP addresses, usernames…
Fanpass – 112,251 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In April 2022, the UK based website for buying and selling soccer tickets Fanpass suffered a data breach which exposed 112k customer records. Impacted data includes names, phone…
OGUsers (2021 breach) – 348,302 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In April 2021, the account hijacking and SIM swapping forum OGusers suffered a data breach, the fourth since December 2018. The breach was subsequently sold on a rival…
BlackBerry Fans – 174,168 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In May 2022, the Chinese BlackBerry enthusiasts website BlackBerry Fans suffered a data breach that exposed 174k member records. The impacted data included usernames, email and IP addresses…
Read Novel (unverified) – 22,424,472 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In May 2019, the Chinese literature website Read Novel allegedly suffered a data breach that exposed 22M unique email addresses. Data also included usernames, genders, phone numbers and…
Read Novel (unverified) – 22,424,472 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In May 2019, the Chinese literature website Read Novel allegedly suffered a data breach that exposed 22M unique email addresses. Data also included usernames, genders, phone numbers and…
BlackBerry Fans – 174,168 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In May 2022, the Chinese BlackBerry enthusiasts website BlackBerry Fans suffered a data breach that exposed 174k member records. The impacted data included usernames, email and IP addresses…
OGUsers (2021 breach) – 348,302 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In April 2021, the account hijacking and SIM swapping forum OGusers suffered a data breach, the fourth since December 2018. The breach was subsequently sold on a rival…
Paragon Cheats – 188,089 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In May 2021, the Grand Theft Auto Online cheats website "Paragon Cheats" suffered a data breach that lead to the shutdown of the service. The breach exposed 188k…
PayHere – 1,580,249 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In late March 2022, the Sri Lankan payment gateway PayHere suffered a data breach that exposed more than 65GB of payment records including over 1.5M unique email addresses.…
Aimware – 305,470 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In mid-2019, the video game cheats website "Aimware" suffered a data breach that exposed hundreds of thousands of subscribers’ personal information. Data included email and IP addresses, usernames,…
Devil-Torrents.pl – 63,451 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In early 2021, the Polish torrents website Devil-Torrents.pl suffered a data breach. A subset of the data including 63k unique email addresses and cracked passwords were subsequently socialised…
Royal Enfield – 420,873 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In January 2020, motorcycle maker Royal Enfield left a database publicly exposed that resulted in the inadvertent publication of over 400k customers. The impacted data included email and…
ZAP-Hosting – 746,682 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In November 2021, web host ZAP-Hosting suffered a data breach that exposed over 60GB of data containing 746k unique email addresses. The breach also contained support chat logs,…
CDEK (unverified) – 19,218,203 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In early 2022, a collective known as IT Army whose stated goal is to "completely de-anonymise most Russian users by leaking hundreds of gigabytes of databases" published over…
Robinhood – 5,003,937 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In November 2021, the online trading platform Robinhood suffered a data breach after a customer service representative was socially engineered. The incident exposed over 5M customer email addresses…
MacGeneration – 101,004 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In January 2022, the French Apple news website MacGeneration suffered a data breach. The incident exposed over 100k usernames, email addresses and passwords stored as salted SHA-512 hashes.…
NVIDIA – 71,335 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In February 2022, microchip company NVIDIA suffered a data breach that exposed employee credentials and proprietary code. Impacted data included over 70k employee email addresses and NTLM password…
GiveSendGo – 89,966 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In February 2022, the Christian fundraising service GiveSendGo suffered a data breach which exposed the personal data of 90k donors to the Canadian "Freedom Convoy" protest against vaccine…
GiveSendGo – 89,966 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In February 2022, the Christian fundraising service GiveSendGo suffered a data breach which exposed the personal data of 90k donors to the Canadian "Freedom Convoy" protest against vaccine…
RedDoorz – 5,890,277 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In September 2020, the hotel management & booking platform RedDoorz suffered a data breach that exposed over 5.8M user accounts. The breached data included names, email addresses, phone…
BTC-Alpha – 362,426 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In November 2021, the crypto exchange platform BTC-Alpha suffered a ransomware attack data breach after which customer data was publicly dumped. The impacted data included 362k email and…
Upstox – 111,002 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In April 2021, Indian brokerage firm Upstox suffered a data breach. The incident exposed extensive personal information on over 100k customers including names, genders, dates of birth, physical…
Open Subtitles – 6,783,158 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In August 2021, the subtitling website Open Subtitles suffered a data breach and subsequent ransom demand. The breach exposed almost 7M subscribers’ personal data including email and IP…
Open Subtitles – 6,783,158 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In August 2021, the subtitling website Open Subtitles suffered a data breach and subsequent ransom demand. The breach exposed almost 7M subscribers’ personal data including email and IP…
Upstox – 111,002 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In April 2021, Indian brokerage firm Upstox suffered a data breach. The incident exposed extensive personal information on over 100k customers including names, genders, dates of birth, physical…
Aditya Birla Fashion and Retail – 5,470,063 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In December 2021, Indian retailer Aditya Birla Fashion and Retail Ltd was breached and ransomed. The ransom demand was allegedly rejected and data containing 5.4M unique email addresses…
FlexBooker – 3,756,794 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In December 2021, the online booking service FlexBooker suffered a data breach that exposed 3.7 million accounts. The data included email addresses, names, phone numbers and for a…
DatPiff – 7,476,940 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In late 2021, email address and plain text password pairs from the rap mixtape website DatPiff appeared for sale on a popular hacking forum. The data allegedly dated…
RedLine Stealer – 441,657 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In December 2021, logs from the RedLine Stealer malware were left publicly exposed and were then obtained by security researcher Bob Diachenko. The data included usernames, email addresses…
Protemps – 49,591 breached accounts
This article has been indexed from Have I Been Pwned latest breaches In October 2021, the Singaporean recruitment website Protemps suffered a data breach that exposed almost 50,000 unique email addresses. The impacted data includes names, email and physical addresses,…