950breaches
17.2Baccounts exposed
8added in 30 days
8.9Maccounts in 30 days
950 results.
112K accounts
guntrader.uk · breached Jul 2021 · added Jul 21, 2021
Guntrader
In July 2021, the United Kingdom based website Guntrader suffered a data breach that exposed 112k unique email addresses. Extensive personal information was also exposed including names, phone numbers, geolocation data, IP addresses and various physical address attributes (cities for all users, complete addresses for some). Passwords stored as bcrypt hashes were also exposed.
Browser user agent detailsEmail addressesGeographic locationsIP addressesNamesPasswordsPhone numbersPhysical addressesSalutations
505.5K accounts
short-edition.com · breached Jun 2021 · added Jul 19, 2021
Short Édition
In June 2021, the French publishing house of short literature Short Édition suffered a data breach that exposed 505k records. Impacted data included email and physical addresses, names, usernames, phone numbers, dates of birth, genders and passwords stored as either salted SHA-1 or salted SHA-512 hashes. Short Édition self-submitted the impacted data to HIBP.
Dates of birthEmail addressesGendersNamesPasswordsPhone numbersPhysical addressesSocial media profilesUsernames
939K accounts
raychat.ir · breached Jan 2021 · added Jul 4, 2021
Raychat
In January 2021, the now defunct Iranian social media platform Raychat suffered a data breach that exposed 939 thousand unique email addresses. The data included names, IP addresses, browser user agent strings and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com.
Browser user agent detailsEmail addressesIP addressesNamesPasswords
8.2M accounts
teespring.com · breached Apr 2020 · added Jun 25, 2021
Teespring
In April 2020, the custom printed apparel website Teespring suffered a data breach that exposed 8.2 million customer records. The data included email addresses, names, geographic locations and social media IDs.
Email addressesGeographic locationsNamesSocial media profiles
1.4M accounts
yotepresto.com · breached Jun 2020 · added Jun 25, 2021
yotepresto.com
In June 2020, the Mexican lending platform yotepresto.com suffered a data breach. Over 1.4 million customers were impacted by the breach which disclosed email and IP addresses, usernames and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com.
Email addressesIP addressesPasswordsUsernames
547.4K accounts
universityofcalifornia.edu · breached Dec 2020 · added Jun 20, 2021
University of California
In December 2020, the University of California suffered a data breach due to vulnerability in in a third-party provider, Accellion. The breach exposed extensive personal data on both students and staff including 547 thousand unique email addresses, names, dates of birth, genders, social security numbers, ethnicities and other academic related data attributes. Further analysis is available in Exploring the Impact of …
Dates of birthEducation levelsEmail addressesEthnicitiesGendersJob titlesNamesPhone numbersPhysical addressesSocial security numbers
16.7M accounts
fotolog.com · breached Dec 2018 · added Jun 15, 2021
Fotolog
In December 2018, the photo sharing social network Fotolog suffered a data breach that exposed 16.7 million unique email addresses. The data also included usernames and unsalted SHA-256 password hashes. The site was dissolved the following year and repurposed as a news website based in Brcko, Bosnia and Herzegovina.
Email addressesPasswordsUsernames
22.5M accounts
dominos.co.in · breached Mar 2021 · added Jun 3, 2021
Domino's India
In April 2021, 13TB of compromised Domino's India appeared for sale on a hacking forum after which the company acknowledged a major data breach they dated back to March. The compromised data included 22.5 million unique email addresses, names, phone numbers, order histories and physical addresses.
Email addressesNamesPhone numbersPhysical addressesPurchases
77.4M accounts
jd.com · breached Jan 2013 · added Jun 2, 2021
JD
In 2013 (exact date unknown), the Chinese e-commerce service JD suffered a data breach that exposed 13GB of data containing 77 million unique email addresses. The data also included usernames, phone numbers and passwords stored as SHA-1 hashes.
Email addressesPasswordsPhone numbersUsernames
762.9K accounts
moneycontrol.com · breached Sep 2017 · added May 22, 2021
Moneycontrol
In April 2021, hackers posted data for sale originating from the online Indian financial platform, Moneycontrol. The data included 763 thousand unique email addresses (allegedly a subset of a larger 40 million account breach), alongside geographic locations, phone numbers, genders, dates of birth and plain text passwords. The date of the original breach is unclear, although the breached data indicates the file was c…
Email addressesGendersGeographic locationsPasswordsPhone numbers
13.3M accounts
yam.com · breached Jun 2013 · added May 22, 2021
Yam
In June 2013, the Taiwanese website Yam.com suffered a data breach which was shared to a popular hacking forum in 2021. The data included 13 million unique email addresses alongside names, usernames, phone numbers, physical addresses, dates of birth and unsalted MD5 password hashes.
Dates of birthEmail addressesNamesPasswordsPhone numbersPhysical addressesUsernames
269.6K accounts
livpure.com · breached Aug 2020 · added May 22, 2021
Livpure
In August 2020, the Indian retailer Livpure suffered a data breach which exposed over 1 million customer purchases with 270 thousand unique email addresses. The data also included names, phone numbers, physical addresses and details of purchased items.
Email addressesNamesPhone numbersPhysical addressesPurchasesSalutations
8M accounts
dailyquiz.me · breached Jan 2021 · added May 21, 2021
Daily Quiz
In January 2021, the quiz website Daily Quiz suffered a data breach that exposed over 8 million unique email addresses. The data also included usernames, IP addresses and passwords stored in plain text.
Email addressesIP addressesPasswordsUsernames
4.2M accounts
iimjobs.com · breached Dec 2018 · added May 21, 2021
IIMJobs
In December 2018, the Indian job portal IIMJobs suffered a data breach that exposed 4.1 million unique email addresses. The data also included names, phone numbers, geographic locations, dates of birth, job titles, job applications and cover letters plus passwords stored as unsalted MD5 hashes. The data was provided to HIBP by dehashed.com.
Dates of birthEmail addressesGeographic locationsIP addressesJob applicationsJob titlesNamesPasswordsPhone numbers
1.3M accounts
wedmegood.com · breached Jan 2021 · added May 13, 2021
WedMeGood
In January 2021, the Indian wedding planning platform WedMeGood suffered a data breach that exposed 1.3 million customers. The breach exposed 41.5GB of data including email and physical addresses, names, genders, phone numbers and password hashes. The data was provided to HIBP by dehashed.com.
Email addressesGendersNamesPasswordsPhone numbersPhysical addresses
3.7M accounts
drivesure.com · breached Dec 2020 · added May 10, 2021
DriveSure
In December 2020, the car dealership service provider DriveSure suffered a data breach. The incident resulted in 26GB of data being downloaded and later shared on a hacking forum. Impacted personal information included 3.6 million unique email addresses, names, phone numbers and physical addresses. Vehicle data was also exposed and included makes, models, VIN numbers and odometer readings. A small number of password…
Email addressesNamesPasswordsPhone numbersPhysical addressesVehicle details
20.9M accounts
parkmobile.io · breached Mar 2021 · added Apr 30, 2021
ParkMobile
In March 2021, the mobile parking app service ParkMobile suffered a data breach which exposed 21 million customers' personal data. The impacted data included email addresses, names, phone numbers, vehicle licence plates and passwords stored as bcrypt hashes. The following month, the data appeared on a public hacking forum where it was extensively redistributed.
Email addressesLicence platesNamesPasswordsPhone numbers
4.8M accounts
descomplica.com.br · breached Mar 2021 · added Apr 28, 2021
Descomplica
In March 2021, the Brazilian EdTech company Descomplica suffered a data breach which was subsequently posted to a popular hacking forum. The data included almost 5 million email addresses, names, the first 6 and last 4 digits and the expiry date of credit cards, purchase histories and password hashes.
Email addressesNamesPartial credit card dataPasswordsPurchases
9.1M accounts
jefit.com · breached Aug 2020 · added Apr 27, 2021
Jefit
In August 2020, the workout tracking app Jefit suffered a data breach. The data was subsequently sold within the hacking community and included over 9 million email and IP addresses, usernames and passwords stored as either vBulletin or argon2 hashes. Several million cracked passwords later appeared in broad circulation.
Email addressesIP addressesPasswordsUsernames
24.5M accounts
bigbasket.com · breached Oct 2020 · added Apr 26, 2021
bigbasket
In October 2020, the Indian grocery platform bigbasket suffered a data breach that exposed over 20 million customer records. The data was originally sold before being leaked publicly in April the following year and included email, IP and physical addresses, names, phones numbers, dates of birth passwords stored as Django(SHA-1) hashes.
Dates of birthEmail addressesIP addressesNamesPasswordsPhone numbersPhysical addresses
3M accounts
mangadex.org · breached Mar 2021 · added Apr 25, 2021
MangaDex
In March 2021, the manga fan site MangaDex suffered a data breach that resulted in the exposure of almost 3 million subscribers. The data included email and IP addresses, usernames and passwords stored as bcrypt hashes. The data was subsequently circulated within hacking groups.
Email addressesIP addressesPasswordsUsernames
20.5M accounts
shopback.com · breached Sep 2020 · added Apr 25, 2021
ShopBack
In September 2020, the cashback reward program ShopBack suffered a data breach. The incident exposed over 20 million unique email addresses along with names, phone numbers, country of residence and passwords stored as salted SHA-1 hashes. The data was provided to HIBP by dehashed.com.
Email addressesGeographic locationsNamesPasswordsPhone numbers
15.1M accounts
clearvoicesurveys.com · breached Aug 2015 · added Apr 23, 2021
ClearVoice Surveys
In April 2021, the market research surveys company ClearVoice Surveys had a publicly facing database backup from 2015 taken and redistributed on a popular hacking forum. The data included 15M unique email addresses across more than 17M rows of data that also included names, physical and IP addresses, genders, dates of birth and plain text passwords. ClearVoice Surveys advised they were aware of the breach and confir…
Dates of birthEmail addressesGendersIP addressesNamesPasswordsPhone numbersPhysical addresses
5.2M accounts
phonehouse.es · breached Apr 2021 · added Apr 22, 2021
Phone House España
In April 2021, the Spanish retailer Phone House allegedly suffered a ransomware attack that also exposed significant volumes of customer data. Attributed to the Babuk ransomware, a collection of data alleged to be a subset of a larger corpus was posted to a dark web site and contained 5.2M email addresses along with names, nationalities, genders, dates of birth, phone numbers and physical addresses. Phone House has …
Dates of birthEmail addressesGendersNamesNationalitiesPhone numbersPhysical addresses
509.5M accounts
facebook.com · breached Aug 2019 · added Apr 4, 2021
Facebook
In April 2021, a large data set of over 500 million Facebook users was made freely available for download. Encompassing approximately 20% of Facebook's subscribers, the data was allegedly obtained by exploiting a vulnerability Facebook advises they rectified in August 2019. The primary value of the data is the association of phone numbers to identities; whilst each record included phone, only 2.5 million contained a…
Dates of birthEmail addressesEmployersGendersGeographic locationsNamesPhone numbersRelationship statuses
11.5M accounts
astoriacompany.com · breached Jan 2021 · added Mar 24, 2021
Unverified
Unverified Data Source
In January 2021, over 11M unique email addresses were discovered by Night Lion Security alongside an extensive amount of personal information including names, physical and IP addresses, phone numbers and dates of birth. Some records also contained social security numbers, driver's license details, personal financial information and health-related data, depending on where the information was sourced from. Initially a…
Bank account numbersCredit status informationDates of birthEmail addressesEmployersHealth insurance informationIncome levelsIP addressesNamesPersonal health dataPhone numbersPhysical addressesSmoking habitsSocial security numbers
465.1K accounts
liker.com · breached Mar 2021 · added Mar 13, 2021
Liker
In March 2021, the self-proclaimed "kinder, smarter social network" Liker suffered a data breach, allegedly in retaliation for the Gab data breach and scraping of data from Parler. The site remained offline after the breach which exposed 465k email addresses in addition to names, dates of birth, education levels, private messages, security questions and answers in plain text, passwords stored as bcrypt hashes and ot…
Auth tokensDates of birthEducation levelsEmail addressesGeographic locationsIP addressesNamesPasswordsPhone numbersPrivate messagesSecurity questions and answersSocial media profilesUsernames
637.3K accounts
travelok.com · breached Dec 2020 · added Mar 10, 2021
Travel Oklahoma
In December 2020, the Oklahoma state Tourism and Recreation Department suffered a data breach. The incident exposed 637k email addresses across a variety of tables including age ranges against brochure orders and dates of birth against contest entries. Genders, names and physical addresses were also exposed.
Age groupsDates of birthEmail addressesGendersNamesPhysical addresses
1.8M accounts
oxfam.org.au · breached Jan 2021 · added Mar 2, 2021
Oxfam
In January 2021, Oxfam Australia was the victim of a data breach which exposed 1.8M unique email addresses of supporters of the charity. The data was put up for sale on a popular hacking forum and also included names, phone numbers, addresses, genders and dates of birth. A small number of people also had partial credit card data exposed (the first 6 and last 3 digits of the card, plus card type and expiry) and in so…
Bank account numbersDates of birthEmail addressesGendersNamesPartial credit card dataPayment historiesPhone numbersPhysical addresses
1.9M accounts
ticketcounter.nl · breached Feb 2021 · added Mar 1, 2021
Ticketcounter
In August 2020, the Dutch ticketing service Ticketcounter inadvertently published a database backup to a publicly accessible location where it was then found and downloaded in February 2021. The data contained 1.9M unique email addresses which were offered for sale on a hacking forum and in some cases included names, physical and IP addresses, genders, dates of birth, payment histories and bank account numbers. Tick…
Bank account numbersDates of birthEmail addressesGendersIP addressesNamesPayment historiesPhone numbersPhysical addresses
Breach data from Have I Been Pwned. Breaches HIBP marks as sensitive are not listed.