950breaches
17.2Baccounts exposed
8added in 30 days
8.9Maccounts in 30 days
950 results.
7.1M accounts
xiaomi.cn · breached Aug 2012 · added Jul 21, 2019
Unverified
Xiaomi
In August 2012, the Xiaomi user forum website suffered a data breach. In all, 7 million email addresses appeared in the breach although a significant portion of them were numeric aliases on the bbs_ml_as_uid.xiaomi.com domain. Usernames, IP addresses and passwords stored as salted MD5 hashes were also exposed. The data was provided with support from dehashed.com. Read more about Chinese data breaches in Have I Been …
Email addressesIP addressesPasswordsUsernames
1.9M accounts
flashflashrevolution.com · breached Jul 2019 · added Jul 21, 2019
Flash Flash Revolution (2019 breach)
In July 2019, the music-based rhythm game Flash Flash Revolution suffered a data breach. The 2019 breach imapcted almost 1.9 million members and is in addition to the 2016 data breach of the same service. Email and IP addesses, usernames, dates of birth and salted MD5 hashes were all exposed in the breach. The data was provided with support from dehashed.com.
Dates of birthEmail addressesIP addressesPasswordsUsernames
5.2M accounts
strongholdkingdoms.com · breached Jul 2018 · added Jul 21, 2019
Stronghold Kingdoms
In July 2018, the massive multiplayer online game Stronghold Kingdoms suffered a data breach. Almost 5.2 million accounts were impacted by the incident which exposed emails addresses, usernames and passwords stored as salted SHA-1 hashes.
Email addressesPasswordsUsernames
1.5M accounts
gamesalad.com · breached Feb 2019 · added Jul 21, 2019
GameSalad
In February 2019, the education and game creation website Game Salad suffered a data breach. The incident impacted 1.5M accounts and exposed email addresses, usernames, IP addresses and passwords stored as SHA-256 hashes.
Email addressesIP addressesPasswordsUsernames
10.6M accounts
armorgames.com · breached Jan 2019 · added Jul 20, 2019
Armor Games
In January 2019, the game portal website Armor Games suffered a data breach. A total of 10.6 million email addresses were impacted by the breach which also exposed usernames, IP addresses, birthdays of administrator accounts and passwords stored as salted SHA-1 hashes.
BiosDates of birthEmail addressesGendersGeographic locationsIP addressesPasswordsUsernames
4M accounts
roll20.net · breached Dec 2018 · added Jul 19, 2019
Roll20
In December 2018, the tabletop role-playing games website Roll20 suffered a data breach. Almost 4 million customers were impacted by the breach and had email and IP addresses, names, bcrypt hashes of passwords and the last 4 digits of credit cards exposed.
Email addressesIP addressesNamesPartial credit card dataPasswords
157.7K accounts
artvalue.com · breached Jun 2019 · added Jul 19, 2019
Artvalue.com
In June 2019, the France-based art valuation website Artvalue.com (now defunct) left their 158k member subscriber base publicly exposed in a text file on their website. The exposed data included names, usernames, email addresses and passwords stored as MD5 hashes. The site operator did not respond when contacted about the incident, although the exposed file was subsequently removed.
Email addressesNamesPasswordsSalutationsUsernames
6.4M accounts
eatstreet.com · breached May 2019 · added Jul 19, 2019
EatStreet
In May 2019, the online food ordering service EatStreet suffered a data breach affecting 6.4 million customers. An extensive amount of personal data was obtained including names, phone numbers, addresses, partial credit card data and passwords stored as bcrypt hashes.
Dates of birthEmail addressesGendersNamesPartial credit card dataPasswordsPhone numbersPhysical addressesSocial media profiles
471.2K accounts
nap.bg · breached Jul 2019 · added Jul 18, 2019
Bulgarian National Revenue Agency
In July 2019, a massive data breach of the Bulgarian National Revenue Agency began circulating with data on 5 million people. Allegedly obtained in June, the data was broadly shared online and included taxation information alongside names, phone numbers, physical addresses and 471 thousand unique email addresses. The breach is said to have affected "nearly all adults in Bulgaria".
Email addressesNamesPhone numbersPhysical addressesTaxation records
18.2M accounts
younow.com · breached Feb 2019 · added Jul 18, 2019
YouNow
In February 2019, data from the live broadcasting service YouNow appeared for sale on a dark web marketplace. Whilst it's not clear what date the actual breach occurred on, the impacted data included 18M unique email addresses, IP addresses, names, usernames and links to social media profiles. As authentication is performed via social providers, no passwords were exposed in the breach. Many records didn't have assoc…
Email addressesIP addressesNamesSocial media profilesUsernames
22.4M accounts
animoto.com · breached Jul 2018 · added Jul 18, 2019
Animoto
In July 2018, the cloud-based video making service Animoto suffered a data breach. The breach exposed 22 million unique email addresses alongside names, dates of birth, country of origin and salted password hashes.
Dates of birthEmail addressesGeographic locationsNamesPasswords
140K accounts
blackspigot.com · breached Jul 2019 · added Jul 17, 2019
BlackSpigotMC
In July 2019, the hacking website BlackSpigotMC suffered a data breach. The XenForo forum based site was allegedly compromised by a rival hacking website and resulted in 8.5GB of data being leaked including the database and website itself. The exposed data included 140k unique email addresses, usernames, IP addresses, genders, geographic locations and passwords stored as bcrypt hashes.
Device informationEmail addressesGendersGeographic locationsIP addressesPasswordsUsernames
39.1M accounts
shein.com · breached Jun 2018 · added Jul 17, 2019
SHEIN
In June 2018, online fashion retailer SHEIN suffered a data breach. The company discovered the breach 2 months later in August then disclosed the incident another month after that. A total of 39 million unique email addresses were found in the breach alongside MD5 password hashes.
Email addressesPasswords
41.8M accounts
pizap.com · breached Dec 2017 · added Jul 16, 2019
piZap
In approximately December 2017, the online photo editing site piZap suffered a data breach. The data was later placed up for sale on a dark web marketplace along with a collection of other data breaches in February 2019. A total of 42 million unique email addresses were included in the breach alongside names, genders and links to Facebook profiles when the social media platform was used to authenticate to piZap. Whe…
Email addressesGendersGeographic locationsNamesPasswordsSocial media profilesUsernamesWebsite activity
49M accounts
netlog.com · breached Nov 2012 · added Jul 15, 2019
Netlog
In July 2018, the Belgian social networking site Netlog identified a data breach of their systems dating back to November 2012 (PDF). Although the service was discontinued in 2015, the data breach still impacted 49 million subscribers for whom email addresses and plain text passwords were exposed.
Email addressesPasswords
101M accounts
evite.com · breached Aug 2013 · added Jul 14, 2019
Evite
In April 2019, the social planning website for managing online invitations Evite identified a data breach of their systems. Upon investigation, they found unauthorised access to a database archive dating back to 2013. The exposed data included a total of 101 million unique email addresses, most belonging to recipients of invitations. Members of the service also had names, phone numbers, physical addresses, dates of …
Dates of birthEmail addressesGendersNamesPasswordsPhone numbersPhysical addresses
28.4M accounts
mindjolt.com · breached Mar 2019 · added Jul 13, 2019
Mindjolt
In March 2019, the online gaming website MindJolt suffered a data breach that exposed 28M unique email addresses. Also impacted were names and dates of birth, but no passwords.
Dates of birthEmail addressesNames
224.1K accounts
breached Jun 2019 · added Jun 28, 2019
Wiener Büchereien
In June 2019, the library of Vienna (Wiener Büchereien) suffered a data breach. The compromised data included 224k unique email addresses, names, physical addresses, phone numbers and dates of birth. The breached data was subsequently posted to Twitter by the alleged perpetrator of the breach.
Dates of birthEmail addressesNamesPhone numbersPhysical addresses
89.4K accounts
socialengineered.net · breached Jun 2019 · added Jun 23, 2019
Social Engineered
In June 2019, the "Art of Human Hacking" site Social Engineered suffered a data breach. The breach of the MyBB forum was published on a rival hacking forum and included 89k unique email addresses spread across 55k forum users and other tables in the database. The exposed data also included usernames, IP addresses, private messages and passwords stored as salted MD5 hashes.
Email addressesIP addressesPasswordsPrivate messagesUsernames
568.8K accounts
d3scene.com · breached Jan 2016 · added Jun 15, 2019
D3Scene
In January 2016, the gaming website D3Scene, suffered a data breach. The compromised vBulletin forum exposed 569k million email addresses, IP address, usernames and passwords stored as salted MD5 hashes. The data was provided to HIBP by dehashed.com.
Email addressesIP addressesPasswordsUsernames
1.1M accounts
emuparadise.me · breached Apr 2018 · added Jun 9, 2019
Emuparadise
In April 2018, the self-proclaimed "biggest retro gaming website on earth", Emuparadise, suffered a data breach. The compromised vBulletin forum exposed 1.1 million email addresses, IP address, usernames and passwords stored as salted MD5 hashes. The data was provided to HIBP by dehashed.com.
Email addressesIP addressesPasswordsUsernames
42K accounts
ordineavvocatiroma.it · breached May 2019 · added May 26, 2019
Ordine Avvocati di Roma
In May 2019, the Lawyers Order of Rome suffered a data breach by a group claiming to be Anonymous Italy. Data on tens of thousands of Roman lawyers was taken from the breached system and redistributed online. The data included contact information, email addresses and email messages themselves encompassing tens of thousands of unique email addresses. A total of 42k unique addresses appeared in the breach.
Email addressesEmail messagesGeographic locationsPasswordsPhone numbers
161.1K accounts
ogusers.com · breached Dec 2018 · added May 19, 2019
OGUsers (2019 breach)
In May 2019, the account hijacking and SIM swapping forum OGusers suffered a data breach. The breach exposed a database backup from December 2018 which was published on a rival hacking forum. There were 161k unique email addresses spread across 113k forum users and other tables in the database. The exposed data also included usernames, IP addresses, private messages and passwords stored as salted MD5 hashes.
Email addressesIP addressesPasswordsPrivate messagesUsernames
49.7K accounts
appartoo.com · breached Mar 2017 · added May 2, 2019
Appartoo
In March 2017, the French Flatsharing site known as Appartoo suffered a data breach. The incident exposed an extensive amount of personal information on almost 50k members including email addresses, genders, ages, private messages sent between users of the service and passwords stored as SHA-256 hashes. Appartoo advised that all subscribers were notified of the incident in early 2017.
AgesAuth tokensEmail addressesEmployment statusesGendersIP addressesMarital statusesNamesPasswordsPhysical addressesPrivate messagesSocial media profiles
1.7M accounts
cprewritten.net · breached Jan 2018 · added Apr 23, 2019
Club Penguin Rewritten (January 2018)
In January 2018, the children's gaming site Club Penguin Rewritten (CPRewritten) suffered a data breach (note: CPRewritten is an independent recreation of Disney's Club Penguin game). The incident exposed almost 1.7 million unique email addresses alongside IP addresses, usernames and passwords stored as bcrypt hashes. When contacted, CPRewritten advised they were aware of the breach and had "contacted affected users…
Email addressesIP addressesPasswordsUsernames
2.5M accounts
morele.net · breached Oct 2018 · added Apr 20, 2019
Morele.net
In October 2018, the Polish e-commerce website Morele.net suffered a data breach. The incident exposed almost 2.5 million unique email addresses alongside phone numbers, names and passwords stored as md5crypt hashes.
Email addressesNamesPasswordsPhone numbers
13.4M accounts
bukalapak.com · breached Oct 2017 · added Apr 18, 2019
Bukalapak
In March 2019, the Indonesian e-commerce website Bukalapak discovered a data breach of the organisation's backups dating back to October 2017. The incident exposed approximately 13 million unique email addresses alongside IP addresses, names and passwords stored as bcrypt and salted SHA-512 hashes.
Email addressesIP addressesNamesPasswordsUsernames
760.6K accounts
datacamp.com · breached Jan 2017 · added Apr 9, 2019
DataCamp
In December 2018, the data science website DataCamp suffered a data breach of records dating back to January 2017. The incident exposed 760k unique email and IP addresses along with names and passwords stored as bcrypt hashes. In 2019, the data appeared listed for sale on a dark web marketplace (along with several other large breaches) and subsequently began circulating more broadly.
Email addressesGeographic locationsIP addressesNamesPasswords
808.3K accounts
knuddels.de · breached Sep 2018 · added Apr 8, 2019
Knuddels
In September 2018, the German social media website Knuddels suffered a data breach. The incident exposed 808k unique email addresses alongside usernames, real names, the city of the person and their password in plain text. Knuddels was subsequently fined €20k for the breach.
Email addressesGeographic locationsNamesPasswordsUsernames
52.6K accounts
demonforums.net · breached Feb 2019 · added Apr 4, 2019
Demon Forums
In February 2019, the hacking forum Demon Forums suffered a data breach. The compromise of the vBulletin forum exposed 52k unique email addresses alongside usernames and passwords stored as salted MD5 hashes.
Email addressesPasswordsUsernames
Breach data from Have I Been Pwned. Breaches HIBP marks as sensitive are not listed.