950breaches
17.2Baccounts exposed
8added in 30 days
8.9Maccounts in 30 days
950 results.
4.3M accounts
gaadi.com · breached May 2015 · added Jul 1, 2018
Gaadi
In May 2015, the Indian motoring website known as Gaadi had 4.3 million records exposed in a data breach. The data contained usernames, email and IP addresses, genders, the city of users as well as passwords stored in both plain text and as MD5 hashes. The site was previously reported as compromised on the Vigilante.pw breached database directory.
Email addressesGendersGeographic locationsIP addressesNamesPasswordsPhone numbersUsernames
43.4M accounts
breached Jun 2018 · added Jun 14, 2018
Spam list
Malware logs
Trik Spam Botnet
In June 2018, the command and control server of a malicious botnet known as the "Trik Spam Botnet" was misconfigured such that it exposed the email addresses of more than 43 million people. The researchers who discovered the exposed Russian server believe the list of addresses was used to distribute various malware strains via malspam campaigns (emails designed to deliver malware).
Email addresses
655.2K accounts
breached Jun 2018 · added Jun 11, 2018
Estonian Citizens (via Estonian Cybercrime Bureau)
In June 2018, the Cybercrime Bureau of the Estonian Central Criminal Police contacted HIBP and asked for assistance in making a data set of 655k email addresses searchable. The Estonian police suspected the email addresses and passwords they obtained were being used to access mailboxes, cryptocurrency exchanges, cloud service accounts and other similar online assets. They've requested that individuals who find thems…
Email addressesPasswords
483K accounts
creative.com · breached May 2018 · added Jun 7, 2018
Creative
In May 2018, the forum for Singaporean hardware company Creative Technology suffered a data breach which resulted in the disclosure of 483k unique email addresses. Running on an old version of vBulletin, the breach also disclosed usernames, IP addresses and salted MD5 password hashes. After being notified of the incident, Creative permanently shut down the forum.
Email addressesIP addressesPasswordsUsernames
275.8K accounts
linuxforums.org · breached May 2018 · added Jun 7, 2018
Linux Forums
In May 2018, the Linux Forums website suffered a data breach which resulted in the disclosure of 276k unique email addresses. Running on an old version of vBulletin, the breach also disclosed usernames, IP addresses and salted MD5 password hashes. Linux Forums did not respond to multiple attempts to contact them about the breach.
Email addressesIP addressesPasswordsUsernames
26.2M accounts
ticketfly.com · breached May 2018 · added Jun 3, 2018
Ticketfly
In May 2018, the website for the ticket distribution service Ticketfly was defaced by an attacker and was subsequently taken offline. The attacker allegedly requested a ransom to share details of the vulnerability with Ticketfly but did not receive a reply and subsequently posted the breached data online to a publicly accessible location. The data included over 26 million unique email addresses along with names, phy…
Email addressesNamesPhone numbersPhysical addresses
777.6K accounts
viewfines.co.za · breached May 2018 · added May 24, 2018
ViewFines
In May 2018, the South African website for viewing traffic fines online known as ViewFines suffered a data breach. Over 934k records containing 778k unique email addresses were exposed and included names, phone numbers, government issued IDs and passwords stored in plain text.
Email addressesGovernment issued IDsNamesPasswordsPhone numbers
24.9M accounts
zing.vn · breached May 2015 · added Apr 28, 2018
VNG
In April 2018, news broke of a massive data breach impacting the Vietnamese company known as VNG after data was discovered being traded on a popular hacking forum where it was extensively redistributed. The breach dated back to an incident in May of 2015 and included of over 163 million customers. The data in the breach contained a wide range of personal attributes including usernames, birth dates, genders and home …
Dates of birthEmail addressesGendersIP addressesMarital statusesNamesOccupationsPasswordsPhone numbersPhysical addressesUsernames
7.5M accounts
17173.com · breached Dec 2011 · added Apr 28, 2018
Unverified
17173
In late 2011, a series of data breaches in China affected up to 100 million users, including 7.5 million from the gaming site known as 17173. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains usernames, email addresses and salted MD5 password hashes and was provided with support…
Email addressesPasswordsUsernames
10.4M accounts
tgbus.com · breached Sep 2017 · added Apr 28, 2018
Unverified
TGBUS
In approximately 2017, it's alleged that the Chinese gaming site known as TGBUS suffered a data breach that impacted over 10 million unique subscribers. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains usernames, email addresses and salted MD5 password hashes and was provided w…
Email addressesPasswordsUsernames
188.8K accounts
ilikecheats.net · breached Oct 2014 · added Apr 22, 2018
ILikeCheats
In October 2014, the game cheats website known as ILikeCheats suffered a data breach that exposed 189k accounts. The vBulletin based forum leaked usernames, IP and email addresses and weak MD5 hashes of passwords. The data was provided with support from dehashed.com.
Email addressesIP addressesPasswordsUsernames
6.8M accounts
cashcrate.com · breached Nov 2016 · added Apr 20, 2018
CashCrate
In June 2017, news broke that CashCrate had suffered a data breach exposing 6.8 million records. The breach of the cash-for-surveys site dated back to November 2016 and exposed names, physical addresses, email addresses and passwords stored in plain text for older accounts along with weak MD5 hashes for newer ones.
Email addressesNamesPasswordsPhysical addresses
28M accounts
taringa.net · breached Aug 2017 · added Apr 19, 2018
Taringa
In September 2017, news broke that Taringa had suffered a data breach exposing 28 million records. Known as "The Latin American Reddit", Taringa's breach disclosure notice indicated the incident dated back to August that year. The exposed data included usernames, email addresses and weak MD5 hashes of passwords.
Email addressesPasswordsUsernames
386.5K accounts
smogon.com · breached Sep 2017 · added Apr 11, 2018
Smogon
In April 2018, the Pokémon website known as Smogon announced they'd suffered a data breach. The breach dated back to September 2017 and affected their XenForo based forum. The exposed data included usernames, email addresses, genders and both bcrypt and MD5 password hashes.
Email addressesGendersGeographic locationsPasswordsUsernamesWebsite activity
13.9M accounts
hiapk.com · breached Jan 2014 · added Apr 1, 2018
Unverified
HiAPK
In approximately 2014, it's alleged that the Chinese Android store known as HIAPK suffered a data breach that impacted 13.8 million unique subscribers. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains usernames, email addresses and salted MD5 password hashes and was provided to…
Email addressesPasswordsUsernames
845K accounts
mdpi.com · breached Aug 2016 · added Mar 25, 2018
MDPI
In August 2016, the Swiss scholarly open access publisher known as MDPI had 17.5GB of data obtained from an unprotected Mongo DB instance. The data contained email exchanges between MDPI and their authors and reviewers which included 845k unique email addresses. MDPI have confirmed that the system has since been protected and that no data of a sensitive nature was impacted. As such, they concluded that notification …
Email addressesEmail messagesIP addressesNames
1.3M accounts
mangafox.me · breached Jun 2016 · added Mar 17, 2018
MangaFox.me
In approximately July 2016, the manga website known as mangafox.me suffered a data breach. The vBulletin based forum exposed 1.3 million accounts including usernames, email and IP addresses, dates of birth and salted MD5 password hashes.
Dates of birthEmail addressesIP addressesPasswordsUsernames
80.1M accounts
breached Feb 2018 · added Feb 26, 2018
Unverified
2,844 Separate Data Breaches
In February 2018, a massive collection of almost 3,000 alleged data breaches was found online. Whilst some of the data had previously been seen in Have I Been Pwned, 2,844 of the files consisting of more than 80 million unique email addresses had not previously been seen. Each file contained both an email address and plain text password and were consequently loaded as a single "unverified" data breach.
Email addressesPasswords
428.8K accounts
underworldempireforums.com · breached Apr 2017 · added Feb 19, 2018
Underworld Empire
In April 2017, the vBulletin forum for the Underworld Empire game suffered a data breach that exposed 429k accounts. The data was then posted to a hacking forum in mid-February 2018 where it was made available to download. The source data contained IP and email addresses, usernames and salted MD5 hashes.
Email addressesIP addressesPasswordsUsernames
18M accounts
8tracks.com · breached Jun 2017 · added Feb 16, 2018
8tracks
In June 2017, the online playlists service known as 8Tracks suffered a data breach which impacted 18 million accounts. In their disclosure, 8Tracks advised that "the vector for the attack was an employee’s GitHub account, which was not secured using two-factor authentication". Salted SHA-1 password hashes for users who didn't sign up with either Google or Facebook authentication were also included. The data was prov…
Email addressesPasswords
143.6K accounts
play-gar.com · breached Apr 2016 · added Feb 14, 2018
Guns and Robots
In approximately April 2016, the gaming website Guns and Robots suffered a data breach resulting in the exposure of 143k unique records. The data contained email and IP addresses, usernames and SHA-1 password hashes. The site was previously reported as compromised on the Vigilante.pw breached database directory.
Email addressesIP addressesPasswordsUsernames
143.7K accounts
autocentrum.pl · breached Feb 2018 · added Feb 9, 2018
Autocentrum.pl
In February 2018, data belonging to the Polish motoring website autocentrum.pl was found online. The data contained 144k email addresses and plain text passwords.
Email addressesPasswords
181.9K accounts
thetvdb.com · breached Nov 2017 · added Jan 29, 2018
TheTVDB.com
In November 2017, the open television database known as TheTVDB.com suffered a data breach. The breached data was posted to a hacking forum and included 182k records with usernames, email addresses and MySQL password hashes.
Email addressesPasswordsUsernames
84K accounts
theflyonthewall.com · breached Dec 2017 · added Jan 15, 2018
The Fly on the Wall
In December 2017, the stock market news website The Fly on the Wall suffered a data breach. The data in the breach included 84k unique email addresses as well as purchase histories and credit card data. Numerous attempts were made to contact The Fly on the Wall about the incident, however no responses were received.
Age groupsCredit cardsEmail addressesGendersNamesPasswordsPhone numbersPhysical addressesPurchasesUsernames
109.2K accounts
lyricsmania.com · breached Dec 2017 · added Jan 15, 2018
Lyrics Mania
In December 2017, the song lyrics website known as Lyrics Mania suffered a data breach. The data in the breach included 109k usernames, email addresses and plain text passwords. Numerous attempts were made to contact Lyrics Mania about the incident, however no responses were received.
Email addressesPasswordsUsernames
512.3K accounts
opencsgo.com · breached Nov 2017 · added Jan 15, 2018
Open CS:GO
In December 2017, the website for purchasing Counter-Strike skins known as Open CS:GO (Counter-Strike: Global Offensive) suffered a data breach (address since redirects to dropgun.com). The 10GB file contained an extensive amount of personal information including email and IP addresses, phone numbers, physical addresses and purchase histories. Numerous attempts were made to contact Open CS:GO about the incident, how…
AvatarsEmail addressesIP addressesPhone numbersPhysical addressesPurchasesSocial media profilesUsernames
17.7K accounts
2fast4u.be · breached Dec 2017 · added Jan 7, 2018
2fast4u
In December 2017, the Belgian motorcycle forum 2fast4u discovered a data breach of their system. The breach of the vBulletin message board impacted over 17k individual users and exposed email addresses, usersnames and salted MD5 passwords.
Email addressesPasswordsUsernames
45.7K accounts
hounddawgs.org · breached Dec 2017 · added Jan 3, 2018
HoundDawgs
In December 2017, the Danish torrent tracker known as HoundDawgs suffered a data breach. More than 55GB of data was dumped publicly and whilst there was initially contention as to the severity of the incident, the data did indeed contain more than 45k unique email addresses complete extensive logs of torrenting activity, IP addresses and SHA1 passwords.
Email addressesIP addressesPasswordsWebsite activity
297.8K accounts
ancestry.com · breached Nov 2015 · added Dec 24, 2017
Ancestry
In November 2015, an Ancestry service known as RootsWeb suffered a data breach. The breach was not discovered until late 2017 when a file containing almost 300k email addresses and plain text passwords was identified.
Email addressesPasswords
660.3K accounts
crackingforum.com · breached Jul 2016 · added Dec 10, 2017
CrackingForum
In approximately mid-2016, the cracking community forum known as CrackingForum suffered a data breach. The vBulletin based forum exposed 660k email and IP addresses, usernames and salted MD5 hashes.
Email addressesIP addressesPasswordsUsernames
Breach data from Have I Been Pwned. Breaches HIBP marks as sensitive are not listed.