950breaches
17.2Baccounts exposed
8added in 30 days
8.9Maccounts in 30 days
950 results.
243.5K accounts
tangerinetelecom.com.au · breached Feb 2024 · added Feb 28, 2024
Tangerine
In February 2024, the Australian Telco Tangerine suffered a data breach that exposed over 200k customer records. Attributed to a legacy customer database, the data included physical and email addresses, names, phone numbers and dates of birth. Whilst the Tangerine login process involves sending a one-time password after entering an email address and phone number, it previously used a traditional password which was a…
Dates of birthEmail addressesNamesPasswordsPhone numbersPhysical addressesSalutations
77.3K accounts
facebook.com · breached Oct 2023 · added Feb 22, 2024
Facebook Marketplace
In February 2024, 200k Facebook Marketplace records allegedly obtained from a Meta contractor in October 2023 were posted to a popular hacking forum. The data contained 77k unique email addresses alongside names, phone numbers, Facebook profile IDs and geographic locations. The data also contained bcrypt password hashes, although there is no indication these belong to the corresponding Facebook accounts.
Email addressesGeographic locationsNamesPasswordsPhone numbersSocial media profiles
207.1K accounts
spoutible.com · breached Jan 2024 · added Feb 5, 2024
Spoutible
In January 2024, Spoutible had 207k records scraped from a misconfigured API that inadvertently returned excessive personal information. The data included names, usernames, email and IP addresses, phone numbers (where provided to the platform), genders and bcrypt password hashes. The incident also exposed 2FA secrets and backup codes along with password reset tokens.
Email addressesGendersIP addressesNamesPasswordsPhone numbersUsernames
6M accounts
mypertamina.id · breached Nov 2022 · added Jan 27, 2024
MyPertamina
In November 2022, the Indonesian oil and gas company Pertamina suffered a data breach of their MyPertamina service. The incident exposed 44M records with 6M unique email addresses along with names, dates of birth, genders, physical addresses and purchases.
Dates of birthEmail addressesGendersNamesPhone numbersPhysical addressesPurchases
15.1M accounts
trello.com · breached Jan 2024 · added Jan 22, 2024
Trello
In January 2024, data was scraped from Trello and posted for sale on a popular hacking forum. Containing over 15M email addresses, names and usernames, the data was obtained by enumerating a publicly accessible resource using email addresses from previous breach corpuses. Trello advised that no unauthorised access had occurred.
Email addressesNamesUsernames
70.8M accounts
breached Sep 2023 · added Jan 17, 2024
Naz.API
In September 2023, over 100GB of stealer logs and credential stuffing lists titled "Naz.API" was posted to a popular hacking forum. The incident contained a combination of email address and plain text password pairs alongside the service they were entered into, and standalone credential pairs obtained from unnamed sources. In total, the corpus of data included 71M unique email addresses and 100M unique passwords.
Email addressesPasswords
4.7M accounts
hathway.com · breached Dec 2023 · added Jan 12, 2024
Hathway
In December 2023, hundreds of gigabytes of data allegedly taken from Indian ISP and digital TV provider Hathway appeared on a popular hacking website. The incident exposed extensive personal information including 4.7M unique email addresses along with names, physical and IP addresses, phone numbers, password hashes and support ticket logs.
Device informationEmail addressesIP addressesNamesPasswordsPhone numbersPhysical addressesSalutationsSupport tickets
3.9M accounts
legendas.tv · breached Oct 2017 · added Jan 4, 2024
Legendas.TV
In October 2017, the now defunct Brazilian service for retrieving subtitles in Portuguese Legendas.TV suffered a data breach that exposed nearly 4M customer records. The impacted data included names, usernames, email and IP addresses and unsalted SHA-1 hashes.
Email addressesIP addressesNamesPasswordsUsernames
3.9M accounts
kaneva.com · breached Jul 2016 · added Dec 9, 2023
Kaneva
In July 2016, now defunct website Kaneva, the service to "build and explore virtual worlds", suffered a data breach that exposed 3.9M user records. The data included email addresses, usernames, dates of birth and salted MD5 password hashes.
Dates of birthEmail addressesPasswordsUsernames
4.6M accounts
gemplex.tv · breached Feb 2021 · added Dec 9, 2023
Gemplex
In February 2021, the Indian streaming platform Gemplex suffered a data breach that exposed 4.6M user accounts. The impacted data included device information, names, phone numbers, email addresses and bcrypt password hashes.
Device informationEmail addressesNamesPasswordsPhone numbers
39.9K accounts
movieforums.com · breached Nov 2022 · added Dec 8, 2023
Movie Forums
In December 2022, the Movie Forums website suffered a data breach that affected 40k users. The breach exposed email and IP addresses, usernames, dates of birth and passwords stored as easily crackable salted MD5 hashes. The data was subsequently posted a popular clear web hacking forum.
Dates of birthEmail addressesIP addressesPasswordsUsernames
4.5M accounts
joygames.me · breached Dec 2019 · added Dec 7, 2023
JoyGames
In December 2019, the forum for the JoyGames website suffered a data breach that exposed 4.5M unique email addresses. The impacted data also included usernames, IP addresses and salted MD5 password hashes.
Email addressesIP addressesPasswordsUsernames
23.2M accounts
railyatri.in · breached Dec 2022 · added Dec 5, 2023
RailYatri
In December 2022, India’s government-approved online travel agency RailYatri suffered a data breach. The incident impacted over 31M customers and exposed 23M unique email addresses. Also impacted were names, genders, phone numbers and tickets purchased, including travel information and fares.
Email addressesGendersNamesPhone numbersPurchases
4.8M accounts
soargames.com · breached Dec 2019 · added Dec 3, 2023
SoarGames
In December 2019, the now defunct gaming website SoarGames suffered a data breach that exposed 4.8M unique email addresses. The impacted data included usernames, email and IP addresses and salted MD5 password hashes. A significant number of the email addresses appeared to have been generated as opposed to organically provided by the user.
Email addressesIP addressesPasswordsUsernames
5M accounts
goninja.de · breached Dec 2019 · added Nov 30, 2023
Go Ninja
In December 2019, the now defunct German gaming website Go Ninja suffered a data breach that exposed 5M unique email addresses. The impacted data included usernames, email and IP addresses and salted MD5 password hashes. More than 4M of the email addresses appeared to have been generated as opposed to organically provided by the user.
Email addressesIP addressesPasswordsUsernames
5.4M accounts
estantevirtual.com.br · breached Feb 2019 · added Nov 29, 2023
Estante Virtual
In February 2019, the Brazilian book store Estante Virtual suffered a data breach that impacted 5.4M customers. The exposed data included names, usernames, email and physical addresses, phone numbers, dates of birth and unsalted SHA-1 password hashes.
Dates of birthEmail addressesNamesPasswordsPhone numbersPhysical addressesUsernames
143.7K accounts
bleachanime.org · breached Jan 2015 · added Nov 29, 2023
Bleach Anime Forum
In 2015, the now defunct independent forum for the Bleach Anime series suffered a data breach that exposed 144k user records. The impacted data included usernames, email addresses and salted MD5 password hashes.
Email addressesPasswordsUsernames
12.6M accounts
indihome.co.id · breached Nov 2019 · added Nov 27, 2023
IndiHome
In mid-2021, reports emerged of a data breach of Indonesia's telecommunications company, IndiHome. Over 26M rows of data alleged to have been sourced from the company was posted to a popular hacking forum and contained 12.6M unique email addresses alongside names, IP addresses, genders and geographic locations. The most recent data was stamped as being recorded in November 2019.
Device informationEmail addressesGendersGeographic locationsIP addressesNames
434.8K accounts
jamtangan.com · breached Jul 2021 · added Nov 27, 2023
Jam Tangan
In July 2021, the online Indonesian watch store, Jam Tangan (AKA Machtwatch), suffered a data breach that exposed over 400k customer records which were subsequently posted to a popular hacking forum. The data included email and IP addresses, names, phone numbers, physical addresses and passwords stored as either unsalted MD5 or bcrypt hashes.
Email addressesIP addressesNamesPasswordsPhone numbersPhysical addresses
98.7K accounts
kitchenpalapp.com · breached Nov 2023 · added Nov 24, 2023
KitchenPal
In November 2023, the kitchen management application KitchenPal suffered a data breach that exposed 146k lines of data. When contacted about the incident, KitchenPal advised the corpus of data came from a staging environment, although acknowledged it contained a small number of users for debugging purposes and included passwords that could not be used. Impacted data included almost 100k email addresses, names, geolo…
Dates of birthEmail addressesGendersGeographic locationsNamesPasswordsPhysical attributesSocial media profiles
7.1M accounts
omgpop.com · breached Jan 2013 · added Nov 20, 2023
OMGPOP
In approximately 2013, the maker of the Draw Something game OMGPOP suffered a data breach. Formerly known as i'minlikewithyou or iilwy and later purchased by Zynga, the breach exposed over 7M email address and plain text password pairs which were later leaked in 2019.
Email addressesPasswords
14.1M accounts
breached Jun 2020 · added Nov 15, 2023
Spam list
Acuity
In mid-2020, a 437GB corpus of data attributed to an entity named "Acuity" was created and later extensively distributed. However, the source could not be confidently verified as any known companies named Acuity. The data totalled over 14M unique email addresses with each row containing extensive personal information across more than 400 columns of data including names, phone numbers, physical addresses, genders and…
Dates of birthEmail addressesGendersIP addressesNamesPhone numbersPhysical addressesSalutations
2.7M accounts
avito.ma · breached Nov 2022 · added Nov 14, 2023
Avito
In November 2022, the Moroccan e-commerce service Avito suffered a data breach that exposed the personal information of 2.7M customers. The data included name, email, phone, IP address and geographic location.
Email addressesGeographic locationsIP addressesNamesPhone numbers
1.3M accounts
chess.com · breached Nov 2023 · added Nov 10, 2023
Chess.com (2023)
In November 2023, over 800k user records were scraped from the Chess.com website and posted to a popular hacking forum. The data included email address, name, username and the geographic location of the user. A further 446k scraped records were later provided and added to HIBP.
Email addressesGeographic locationsNamesUsernames
19.8M accounts
linkedin.com · breached Nov 2023 · added Nov 7, 2023
Spam list
LinkedIn Scraped and Faked Data (2023)
In November 2023, a post to a popular hacking forum alleged that millions of LinkedIn records had been scraped and leaked. On investigation, the data turned out to be a combination of legitimate data scraped from LinkedIn and email addresses constructed from impacted individuals' names.
Email addressesGendersGeographic locationsJob titlesNamesProfessional skillsSocial media profiles
654.5K accounts
gamingmonk.com · breached Dec 2020 · added Nov 5, 2023
GamingMonk
In December 2020, India's "largest esports community" GamingMonk (since acquired by and redirected to MPL Esports), suffered a data breach. The incident exposed 655k unique email addresses along with names, usernames, phone numbers, dates of birth and bcrypt password hashes.
Dates of birthEmail addressesNamesPasswordsPhone numbersUsernames
214.5K accounts
fitmart.de · breached Oct 2021 · added Nov 3, 2023
Fitmart
In October 2021, data from the German fitness supplies store Fitmart was obtained and later redistributed online. The data included 214k unique email addresses accompanied by plain text passwords, allegedly "dehashed" from the original stored version.
Email addressesPasswords
6.2M accounts
gamesprite.me · breached Dec 2019 · added Oct 30, 2023
GameSprite
In December 2019, the now defunct gaming platform GameSprite suffered a data breach that exposed over 6M unique email addresses. The impacted data also included usernames, IP addresses and salted MD5 password hashes.
Email addressesIP addressesPasswordsUsernames
4.3M accounts
memechat.app · breached Jun 2022 · added Oct 29, 2023
MemeChat
In mid-2022, "the ultimate hub of memes" MemeChat suffered a data breach that exposed 7.4M records. Alleged to be due to a misconfigured Elasticsearch instance, the data contained 4.3M unique email addresses alongside usernames.
Email addressesUsernames
76.7K accounts
toumei.co.jp · breached Oct 2023 · added Oct 27, 2023
Toumei
In October 2023, the Japanese consultancy firm Toumei suffered a data breach. The breach exposed over 100M lines and 10GB of data including 77k unique email addresses along with names, phone numbers and physical addresses.
Email addressesNamesPhone numbersPhysical addresses
Breach data from Have I Been Pwned. Breaches HIBP marks as sensitive are not listed.