950breaches
17.2Baccounts exposed
8added in 30 days
8.9Maccounts in 30 days
950 results.
139.4K accounts
komplettfritid.no · breached Feb 2021 · added Jan 23, 2023
KomplettFritid
In January 2023, the online Norwegian store KomplettFritid was reported as having had a data breach dating back to February 2021. The incident exposed 140k customer records including physical, email and IP addresses, names, phone numbers and passwords. Most passwords were stored as bcrypt hashes with a small number appearing in plain text.
Email addressesIP addressesNamesPasswordsPhone numbersPhysical addresses
20K accounts
autotrader.com · breached Jan 2023 · added Jan 23, 2023
Autotrader
In January 2023, 1.4M records from the Autotrader online vehicle marketplace appeared on a popular hacking forum. Autotrader stated that the "data in question relates to aged listing data that was generally publicly available on our site at the time and open to automated collection methods". The data contained 20k unique email addresses alongside physical addresses and phone numbers of dealers and vehicle details in…
Email addressesPhone numbersPhysical addressesVehicle detailsVehicle identification numbers (VINs)
756.7K accounts
zurich.co.jp · breached Jan 2023 · added Jan 22, 2023
Zurich
In January 2023, the Japanese arm of Zurich insurance suffered a data breach that exposed 2.6M customer records with over 756k unique email addresses. The data was subsequently posted to a popular hacking forum and also included names, genders, dates of birth and details of insured vehicles.
Dates of birthEmail addressesGendersNamesVehicle details
367.5K accounts
doordash.com · breached Aug 2022 · added Jan 7, 2023
DoorDash
In August 2022, the food ordering and delivery service DoorDash disclosed a data breach that impacted a portion of their customers. DoorDash attributed the breach to an unnamed "third-party vendor" they stated was the victim of a phishing campaign. The incident exposed 367k unique personal email addresses alongside names, post codes and partial card data, namely the brand, expiry data and last four digits of the car…
Email addressesGeographic locationsNamesPartial credit card data
1.5M accounts
slideteam.net · breached Apr 2021 · added Jan 7, 2023
SlideTeam
In April 2021, the "world’s largest collection of pre-designed presentation slides" SlideTeam had 1.4M records breached and later published to a popular hacking forum the following year. Allegedly sourced from a compromised Magento instance, the data included names, email addresses and passwords stored as salted hashes.
Email addressesNamesPasswords
211.5M accounts
twitter.com · breached Jan 2021 · added Jan 5, 2023
Twitter (200M)
In early 2023, over 200M records scraped from Twitter appeared on a popular hacking forum. The data was obtained sometime in 2021 by abusing an API that enabled email addresses to be resolved to Twitter profiles. The subsequent results were then composed into a corpus of data containing email addresses alongside public Twitter profile information including names, usernames and follower counts.
Email addressesNamesSocial media profilesUsernames
229M accounts
deezer.com · breached Apr 2019 · added Jan 2, 2023
Deezer
In late 2022, the music streaming service Deezer disclosed a data breach that impacted over 240M customers. The breach dated back to a mid-2019 backup exposed by a 3rd party partner which was subsequently sold and then broadly redistributed on a popular hacking forum. Impacted data included 229M unique email addresses, IP addresses, names, usernames, genders, DoBs and the geographic location of the customer.
Dates of birthEmail addressesGendersGeographic locationsIP addressesNamesSpoken languagesUsernames
93.3K accounts
benchmark.rs · breached Nov 2019 · added Jan 1, 2023
Benchmark
In November 2019, the Serbian technology news website Benchmark suffered a breach of its forum that exposed 93k customer records. The breach exposed IP and email addresses, usernames and passwords stored as salted MD5 hashes. A forum administrator subsequently advised that the breach was due to the forum previously running on an outdated vBulletin instance.
Email addressesIP addressesPasswordsUsernames
5.3M accounts
gemini.com · breached Dec 2022 · added Dec 16, 2022
Gemini
In late 2022, a hacker posted a data set to a public hacking forum which they alleged was sourced from the Gemini crypto exchange, a claim that was later proven to be false as the data was traced back to an incident at a third-party vendor. The source of the breach was later established as being Twilio, who processed the data of some Gemini customers using their Authy service for 2FA. Twilio described the incident a…
Email addressesPartial phone numbers
1.6M accounts
cointracker.io · breached Dec 2022 · added Dec 12, 2022
CoinTracker
In December 2022, the Crypto & NFT taxes service CoinTracker reported a data breach that impacted over 1.5M of their customers. The company later attributed the breach to a compromise SendGrid in an attack that targeted multiple customers of the email provider. The breach exposed email addresses and partially redacted phone numbers, with CoinTracker advising that the later did not originate from their service.
Email addressesPartial phone numbers
919.8K accounts
abandonia.com · breached Nov 2022 · added Dec 7, 2022
Abandonia (2022)
In November 2022, the gaming website dedicated to classic DOS games Abandonia suffered a data breach resulting in the exposure of 920k unique user records. This breach was in addition to another one 7 years earlier in 2015. The data contained email and IP addresses, usernames and salted MD5 hashes of passwords.
Email addressesIP addressesPasswordsUsernames
51.7M accounts
breached Jun 2020 · added Nov 22, 2022
Unverified
Not Acxiom
In 2020, a corpus of data containing almost a quarter of a billion records spanning over 400 different fields was misattributed to database marketing company Acxiom and subsequently circulated within the hacking community. On review, Acxiom concluded that "the claims are indeed false and that the data, which has been readily available across multiple environments, does not come from Acxiom and is in no way the subje…
Email addressesIP addressesNamesPhone numbersPhysical addresses
2.4M accounts
ggcorp.me · breached Aug 2022 · added Nov 8, 2022
GGCorp
In August 2022, the MMORPG website GGCorp suffered a data breach that exposed almost 2.4M unique email addresses. The data also included IP addresses, usernames and MD5 password hashes.
Email addressesIP addressesPasswordsUsernames
398K accounts
lolzteam.net · breached May 2018 · added Nov 6, 2022
Lolzteam
In May 2018, the Russian hacking forum Lolzteam suffered a data breach that exposed 400k members. The impacted data included usernames and email addresses which were later redistributed via another hacking forum.
Email addressesUsernames
34.5K accounts
doomworld.com · breached Oct 2022 · added Oct 24, 2022
Doomworld
In October 2022, the Doomworld fourm suffered a data breach that exposed 34k member records. The data included email and IP addresses, usernames and bcrypt password hashes.
Email addressesIP addressesPasswordsUsernames
108.9K accounts
epal.gg · breached Apr 2022 · added Oct 24, 2022
E-Pal
In October 2022, the service dedicated to finding friends on Discord known as E-Pal disclosed a data breach. The compromised data included over 100k unique email addresses and usernames spanning approximately 1M orders. The data was subsequently distributed via a popular hacking forum.
Email addressesPurchasesUsernames
6.7M accounts
wakanim.tv · breached Aug 2022 · added Oct 6, 2022
Wakanim
In August 2022, the European streaming service Wakanim suffered a data breach which was subsequently advertised and sold on a popular hacking forum. The breach exposed 6.7M customer records including email, IP and physical addresses, names and usernames.
Browser user agent detailsEmail addressesIP addressesNamesPhysical addressesUsernames
1.3M accounts
bhinneka.com · breached Jan 2020 · added Oct 6, 2022
Bhinneka
In early 2020, the Indonesian consumer electronics website Bhinneka suffered a data breach that exposed almost 1.3M customer records. The data included email and physical addresses, names, genders, dates of birth, phone numbers and salted password hashes.
Dates of birthEmail addressesGendersNamesPasswordsPhone numbersPhysical addresses
6.1M accounts
flytap.com · breached Aug 2022 · added Sep 23, 2022
TAP Air Portugal
In August 2022, the Portuguese airline TAP Air Portugal was the target of a ransomware attack perpetrated by the Ragnar Locker gang who later leaked the compromised data via a public dark web site. Over 5M unique email addresses were exposed alongside other personal data including names, genders, DoBs, phone numbers and physical addresses.
Dates of birthEmail addressesGendersNamesNationalitiesPhone numbersPhysical addressesSalutationsSpoken languages
349.6K accounts
brandnewtube.com · breached Aug 2022 · added Sep 8, 2022
Brand New Tube
In August 2022, the streaming website Brand New Tube suffered a data breach that exposed the personal information of almost 350k subscribers. The impacted data included email and IP addresses, usernames, genders, passwords stored as unsalted SHA-1 hashes and private messages.
Email addressesGendersIP addressesPasswordsPrivate messagesUsernames
7.5M accounts
start.film · breached Jun 2021 · added Aug 30, 2022
START
In August 2022, news broke of an attack against the Russian streaming service "START". The incident led to the exposure of 44M records containing 7.4M unique email addresses. The impacted data also included the subscriber's country and password hash. START subsequently acknowledged the incident in a Telegram post and stated that the data dated back to 2021.
Email addressesGeographic locationsNamesPasswords
2.1M accounts
banorte.com · breached Aug 2014 · added Aug 18, 2022
Banorte
In August 2022, millions of records from Mexican bank "Banorte" were publicly dumped on a popular hacking forum including 2.1M unique email addresses, physical addresses, names, phone numbers, RFC (tax) numbers, genders and bank balances. Banorte have stated that the data is "outdated", although have not yet indicated how far back it dates to. Anecdotal feedback from HIBP subscribers suggests the data may date back …
Account balancesEmail addressesGendersGovernment issued IDsNamesPhone numbersPhysical addresses
1M accounts
sitepoint.com · breached Jun 2020 · added Aug 17, 2022
SitePoint
In June 2020, the web development site SitePoint suffered a data breach that exposed over 1M customer records. Impacted data included email and IP addresses, names, usernames, bios and passwords stored as bcrypt hashes.
BiosEmail addressesIP addressesNamesPasswordsUsernames
6.7M accounts
twitter.com · breached Jan 2022 · added Aug 13, 2022
Twitter
In January 2022, a vulnerability in Twitter's platform allowed an attacker to build a database of the email addresses and phone numbers of millions of users of the social platform. In a disclosure notice later shared in August 2022, Twitter advised that the vulnerability was related to a bug introduced in June 2021 and that they are directly notifying impacted customers. The impacted data included either email addre…
BiosEmail addressesGeographic locationsNamesPhone numbersProfile photosUsernames
22.2M accounts
questionpro.com · breached May 2022 · added Aug 5, 2022
QuestionPro
In May 2022, the survey website QuestionPro was the target of an extortion attempt relating to an alleged data breach. Over 100GB of data containing 22M unique email addresses (some of which appear to be generated by the platform), are alleged to have been extracted from the service along with IP addresses, browser user agents and results relating to surveys. QuestionPro would not confirm whether a breach had occurr…
Browser user agent detailsEmail addressesIP addressesSurvey results
985.6K accounts
tunedglobal.com · breached Mar 2016 · added Aug 3, 2022
Tuned Global
In January 2021, data from a number of breached services including Tuned Global were released to a public hacking forum. The breach appears to date back to 2016 and includes 985k records containing email addresses, names, a small number of physical addresses and phone numbers and passwords stored in plain text.
Email addressesNamesPasswordsPhone numbersPhysical addresses
437.9K accounts
mechodownload.com · breached Oct 2013 · added Aug 2, 2022
Mecho Download
In October 2013, the (now defunct) downloads website "Mecho Download" suffered a data breach that exposed 438k records. Data from the vBulletin based website included email and IP addresses, usernames and passwords stored as salted MD5 hashes.
Email addressesIP addressesPasswordsUsernames
83.6K accounts
battlefy.com · breached Jan 2016 · added Jul 29, 2022
Battlefy
In January 2016, the esports website Battlefy suffered a data breach that exposed 83k customer records. The impacted data included email addresses, usernames and passwords stored as bcrypt hashes.
Email addressesPasswordsUsernames
3.4M accounts
paytm.com · breached Aug 2020 · added Jul 26, 2022
Likely fake
Paytm
In August 2020, the Indian payment provider Paytm was reported as having suffered a data breach and subsequent ransom demand, after which the data was circulated publicly. Further investigation into the data concluded that the breach was fabricated and did not originate from Paytm. The impacted data covered 3.4M unique email addresses along with names, phone numbers, genders, dates of birth, income levels and previo…
Dates of birthEmail addressesGendersGeographic locationsIncome levelsNamesPhone numbersPurchases
492.5K accounts
ppcgeeks.com · breached Aug 2016 · added Jul 18, 2022
PPCGeeks
In August 2016, the pocket PC fan site forum PPCGeeks suffered a data breach that exposed over 490k records. The breach of the vBulletin forum exposed email and IP addresses, usernames, dates of birth and passwords stored as salted MD5 hashes.
Dates of birthEmail addressesIP addressesPasswordsUsernames
Breach data from Have I Been Pwned. Breaches HIBP marks as sensitive are not listed.