950breaches
17.2Baccounts exposed
8added in 30 days
8.9Maccounts in 30 days
950 results.
583.5K accounts
cloudpets.com · breached Jan 2017 · added Feb 27, 2017
CloudPets
In January, the maker of teddy bears that record children's voices and sends them to family and friends via the internet CloudPets left their database publicly exposed and it was subsequently downloaded by external parties (the data was also subject to 3 different ransom demands). 583k records were provided to HIBP via a data trader and included email addresses and bcrypt hashes, but the full extent of user data exp…
Email addressesFamily members' namesPasswords
2.5M accounts
funimation.com · breached Jul 2016 · added Feb 20, 2017
Funimation
In July 2016, the anime site Funimation suffered a data breach that impacted 2.5 million accounts. The data contained usernames, email addresses, dates of birth and salted SHA1 hashes of passwords.
Dates of birthEmail addressesPasswordsUsernames
1.3M accounts
elance.com · breached Jan 2009 · added Feb 18, 2017
Elance
Sometime in 2009, staffing platform Elance suffered a data breach that impacted 1.3 million accounts. Appearing online 8 years later, the data contained usernames, email addresses, phone numbers and SHA1 hashes of passwords, amongst other personal data.
Email addressesEmployersGeographic locationsPasswordsPhone numbersUsernames
1.9M accounts
cdprojektred.com · breached Mar 2016 · added Jan 31, 2017
CD Projekt RED
In March 2016, Polish game developer CD Projekt RED suffered a data breach. The hack of their forum led to the exposure of almost 1.9 million accounts along with usernames, email addresses and salted SHA1 passwords.
Email addressesPasswordsUsernames
1.3M accounts
pspiso.com · breached Sep 2015 · added Jan 29, 2017
PSP ISO
In approximately September 2015, the PlayStation PSP forum known as PSP ISO was hacked and almost 1.3 million accounts were exposed. Along with email and IP addresses, the vBulletin forum also exposed salted MD5 password hashes.
Email addressesIP addressesPasswordsUsernames
1.3M accounts
xbox360iso.com · breached Sep 2015 · added Jan 29, 2017
Xbox 360 ISO
In approximately September 2015, the XBOX 360 forum known as XBOX360 ISO was hacked and 1.2 million accounts were exposed. Along with email and IP addresses, the vBulletin forum also exposed salted MD5 password hashes.
Email addressesIP addressesPasswordsUsernames
366.1K accounts
mrexcel.com · breached Dec 2016 · added Jan 22, 2017
MrExcel
In December 2016, the forum for the Microsoft Excel tips and solutions site Mr Excel suffered a data breach. The hack of the vBulletin forum led to the exposure of over 366k accounts along with email and IP addresses, dates of birth and salted passwords hashed with MD5. The owner of the MrExcel forum subsequently self-submitted the data to HIBP.
Dates of birthEmail addressesIP addressesPasswordsSocial connectionsUsernamesWebsite activity
26.2M accounts
qip.ru · breached Jun 2011 · added Jan 8, 2017
QIP
In mid-2011, the Russian instant messaging service known as QIP (Quiet Internet Pager) suffered a data breach. The attack resulted in the disclosure of over 26 million unique accounts including email addresses and passwords with the data eventually appearing in public years later.
Email addressesPasswordsUsernamesWebsite activity
830.2K accounts
pokemonnegro.com · breached Oct 2016 · added Jan 3, 2017
Pokémon Negro
In approximately October 2016, the Spanish Pokémon site Pokémon Negro suffered a data breach. The attack resulted in the disclosure of 830k accounts including email and IP addresses along with plain text passwords. Pokémon Negro did not respond when contacted about the breach.
Email addressesIP addressesPasswords
1.1M accounts
daniweb.com · breached Dec 2015 · added Dec 28, 2016
DaniWeb
In late 2015, the technology and social site DaniWeb suffered a data breach. The attack resulted in the disclosure of 1.1 million accounts including email and IP addresses which were also accompanied by salted MD5 hashes of passwords. However, DaniWeb have advised that "the breached password hashes and salts are incorrect" and that they have since switched to new infrastructure and software.
Email addressesIP addressesPasswords
4.9M accounts
parapa.mail.ru · breached Aug 2016 · added Dec 28, 2016
Пара Па
In August 2016, the Russian gaming site known as Пара Па (or parapa.mail.ru) was hacked along with a number of other forums on the Russian mail provider, mail.ru. The vBulletin forum contained 4.9 million accounts including usernames, email addresses and passwords stored as salted MD5 hashes.
Email addressesPasswordsUsernames
12.9M accounts
cfire.mail.ru · breached Aug 2016 · added Dec 28, 2016
Cross Fire
In August 2016, the Russian gaming forum known as Cross Fire (or cfire.mail.ru) was hacked along with a number of other forums on the Russian mail provider, mail.ru. The vBulletin forum contained 12.8 million accounts including usernames, email addresses and passwords stored as salted MD5 hashes.
Email addressesPasswordsUsernames
7.5M accounts
uuu9.com · breached Sep 2016 · added Dec 27, 2016
Unverified
uuu9
In September 2016, data was allegedly obtained from the Chinese website known as uuu9.com and contained 7.5M accounts. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains email addresses and user names. Read more about Chinese data breaches in Have I Been Pwned.
Email addressesPasswordsUsernames
238.4K accounts
botoflegends.com · breached Nov 2014 · added Dec 27, 2016
Bot of Legends
In November 2014, the forum for Bot of Legends suffered a data breach. The IP.Board forum contained 238k accounts including usernames, email and IP addresses and passwords stored as salted MD5 hashes.
Email addressesIP addressesPasswordsUsernamesWebsite activity
452.9K accounts
ovh.com · breached May 2015 · added Dec 27, 2016
OVH
In mid-2015, the forum for the hosting provider known as OVH suffered a data breach. The vBulletin forum contained 453k accounts including usernames, email and IP addresses and passwords stored as salted MD5 hashes.
Email addressesIP addressesPasswordsUsernames
504.6K accounts
kimsufi.com · breached May 2015 · added Dec 27, 2016
Kimsufi
In mid-2015, the forum for the providers of affordable dedicated servers known as Kimsufi suffered a data breach. The vBulletin forum contained over half a million accounts including usernames, email and IP addresses and passwords stored as salted MD5 hashes.
Email addressesIP addressesPasswordsUsernames
16.4K accounts
ethereum.org · breached Dec 2016 · added Dec 20, 2016
Ethereum
In December 2016, the forum for the public blockchain-based distributed computing platform Ethereum suffered a data breach. The database contained over 16k unique email addresses along with IP addresses, private forum messages and (mostly) bcrypt hashed passwords. Ethereum elected to self-submit the data to HIBP, providing the service with a list of email addresses impacted by the incident.
Email addressesIP addressesPasswordsPrivate messagesUsernamesWebsite activity
4.9M accounts
quinstreet.com · breached Dec 2015 · added Dec 17, 2016
QuinStreet
In approximately late 2015, the maker of "performance marketing products" QuinStreet had a number of their online assets compromised. The attack impacted 28 separate sites, predominantly technology forums such as flashkit.com, codeguru.com and webdeveloper.com (view a full list of sites). QuinStreet advised that impacted users have been notified and passwords reset. The data contained details on over 4.9 million peo…
Dates of birthEmail addressesIP addressesPasswordsUsernamesWebsite activity
400.3K accounts
payasugym.com · breached Dec 2016 · added Dec 17, 2016
PayAsUGym
In December 2016, an attacker breached PayAsUGym's website exposing over 400k customers' personal data. The data was consequently leaked publicly and broadly distributed via Twitter. The leaked data contained personal information including email addresses and passwords hashed using MD5 without a salt.
Browser user agent detailsEmail addressesIP addressesNamesPartial credit card dataPasswordsPhone numbersWebsite activity
32.9M accounts
data4marketers.com · breached Apr 2015 · added Nov 24, 2016
Spam list
SC Daily Phone Spam List
In early 2015, a spam list known as SC Daily Phone emerged containing almost 33M identities. The data includes personal attributes such as names, physical and IP addresses, genders, birth dates and phone numbers. Read more about spam lists in HIBP.
Dates of birthEmail addressesGendersIP addressesNamesPhysical addresses
30.7M accounts
data4marketers.com · breached Oct 2015 · added Nov 24, 2016
Spam list
Special K Data Feed Spam List
In mid to late 2015, a spam list known as the Special K Data Feed was discovered containing almost 31M identities. The data includes personal attributes such as names, physical and IP addresses, genders, birth dates and phone numbers. Read more about spam lists in HIBP.
Dates of birthEmail addressesGendersIP addressesNamesPhysical addresses
1.1M accounts
geekedin.net · breached Aug 2016 · added Nov 17, 2016
GeekedIn
In August 2016, the technology recruitment site GeekedIn left a MongoDB database exposed and over 8M records were extracted by an unknown third party. The breached data was originally scraped from GitHub in violation of their terms of use and contained information exposed in public profiles, including over 1 million members' email addresses. Full details on the incident (including how impacted members can see their …
Email addressesGeographic locationsNamesProfessional skillsUsernamesYears of professional experience
1.5M accounts
armyforceonline.com · breached May 2016 · added Nov 10, 2016
Army Force Online
In May 2016, the online gaming site Army Force Online suffered a data breach that exposed 1.5M accounts. The breached data was found being regularly traded online and included usernames, email and IP addresses and MD5 passwords.
AvatarsEmail addressesGeographic locationsIP addressesNamesPasswordsUsernamesWebsite activity
8.7M accounts
dodonew.com · breached Dec 2011 · added Nov 10, 2016
Unverified
Dodonew.com
In late 2011, data was allegedly obtained from the Chinese website known as Dodonew.com and contained 8.7M accounts. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains email addresses and user names. Read more about Chinese data breaches in Have I Been Pwned.
Email addressesUsernames
1.1M accounts
lookbook.nu · breached Aug 2012 · added Nov 8, 2016
Lookbook
In August 2012, the fashion site Lookbook suffered a data breach. The data later appeared listed for sale in June 2016 and included 1.1 million usernames, email and IP addresses, birth dates and plain text passwords.
Dates of birthEmail addressesIP addressesNamesPasswordsUsernamesWebsite activity
444.8K accounts
cheapassgamer.com · breached Jul 2015 · added Nov 8, 2016
CheapAssGamer.com
In approximately mid-2015, the forum for CheapAssGamer.com suffered a data breach. The database from the IP.Board based forum contained 445k accounts including usernames, email and IP addresses and salted MD5 password hashes.
Email addressesIP addressesPasswordsUsernames
6.5M accounts
aipai.com · breached Sep 2016 · added Nov 7, 2016
Unverified
Aipai.com
In September 2016, data allegedly obtained from the Chinese gaming website known as Aipai.com and containing 6.5M accounts was leaked online. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains email addresses and MD5 password hashes. Read more about Chinese data breaches in Have …
Email addressesPasswords
7.8M accounts
co188.com · breached Jul 2011 · added Nov 7, 2016
Unverified
Civil Online
In mid-2011, data was allegedly obtained from the Chinese engineering website known as Civil Online and contained 7.8M accounts. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains email and IP addresses, user names and MD5 password hashes. Read more about Chinese data breaches in…
Email addressesIP addressesPasswordsUsernamesWebsite activity
2.6M accounts
duowan.com · breached Jan 2011 · added Nov 7, 2016
Unverified
Duowan.com
In approximately 2011, data was allegedly obtained from the Chinese gaming website known as Duowan.com and contained 2.6M accounts. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains email addresses, user names and plain text passwords. Read more about Chinese data breaches in Ha…
Email addressesPasswordsUsernames
1M accounts
thewarinc.com · breached Jul 2012 · added Nov 7, 2016
War Inc.
In mid-2012, the real-time strategy game War Inc. suffered a data breach. The attack resulted in the exposure of over 1 million accounts including usernames, email addresses and salted MD5 hashes of passwords.
Email addressesPasswordsUsernamesWebsite activity
Breach data from Have I Been Pwned. Breaches HIBP marks as sensitive are not listed.