950breaches
17.2Baccounts exposed
8added in 30 days
8.9Maccounts in 30 days
950 results.
119.2K accounts
vimeo.com · breached Apr 2026 · added May 5, 2026
Vimeo
In April 2026, the ShinyHunters extortion group listed Vimeo on their extortion portal as part of their "pay or leak" campaign. They subsequently published hundreds of gigabytes of data, predominantly consisting of video titles, technical data and metadata. The data also included 119k unique email addresses, sometimes accompanied by names. Vimeo attributed the exposure to a breach of Anodot, a third-party analytics …
Email addressesNames
126 accounts
reborngaming.net · breached Apr 2026 · added May 4, 2026
Reborn Gaming
In April 2026, the gaming community Reborn Gaming suffered a data breach due to a vulnerability in cPanel and WebHost Manager (WHM). The breach exposed 126 unique email addresses along with IP addresses and Steam IDs. Reborn Gaming self-submitted the data to Have I Been Pwned.
Email addressesIP addresses
1.8M accounts
marcusmillichap.com · breached Apr 2026 · added May 3, 2026
Marcus & Millichap
In April 2026, the commercial real estate brokerage firm Marcus & Millichap was named as one of multiple alleged victims of the ShinyHunters hacking and extortion group. Data alleged to have been obtained from the company was subsequently released publicly and included 1.8M unique email addresses, along with names, phone numbers and employment-related information including employer, job title and physical company ad…
Email addressesEmployersJob titlesNamesPhone numbersPhysical addresses
5.1M accounts
zenbusiness.com · breached Mar 2026 · added May 2, 2026
ZenBusiness
In March 2026, the hacker and extortion group "ShinyHunters" claimed to have obtained a substantial corpus of data from ZenBusiness, a business formation and compliance platform. The group claimed the data had been exfiltrated from platforms including Snowflake, Mixpanel and Salesforce, and threatened to publish it if a ransom was not paid. The following month, after claiming payment had not been made, ShinyHunters …
Email addressesNamesPhone numbers
215.6K accounts
aman.com · breached Apr 2026 · added May 1, 2026
Aman
In April 2026, the ultra-luxury hotel brand Aman was named by ShinyHunters as the target of a "pay or leak" extortion campaign, with the data allegedly obtained from their Salesforce CRM. The data was subsequently leaked publicly and contained over 200k unique email addresses. Whilst not present on all records, the data also included genders, physical addresses, phone numbers, nationalities, dates of birth, spouse n…
Dates of birthEmail addressesGendersLanguage preferencesNamesNationalitiesPhone numbersPhysical addressesSpouses namesVIP statuses
8.2M accounts
pitneybowes.com · breached Apr 2026 · added Apr 27, 2026
Pitney Bowes
In April 2026, the hacking collective ShinyHunters claimed to have obtained data from Pitney Bowes as part of a broader extortion campaign that also named several other organisations. After negotiations allegedly failed, the group publicly released the data which included 8.2M unique email addresses, along with names, phone numbers and physical addresses. A subset of the data also included Pitney Bowes employee reco…
Email addressesJob titlesNamesPhone numbersPhysical addresses
5.5M accounts
adt.com · breached Apr 2026 · added Apr 27, 2026
ADT
In April 2026, home security firm ADT confirmed a data breach by ShinyHunters, which listed the company on its website as part of a "pay or leak" extortion attempt. The breach impacted 5.5M unique email addresses along with names, phone numbers and physical addresses. ADT also advised that "in a small percentage of cases, dates of birth and the last four digits of Social Security numbers or Tax IDs were included" an…
Dates of birthEmail addressesNamesPartial government issued IDsPhone numbersPhysical addresses
1.4M accounts
udemy.com · breached Apr 2026 · added Apr 26, 2026
Udemy
In April 2026, online training company Udemy was the victim of a “pay or leak” extortion attempt perpetrated by the ShinyHunters group. The data was subsequently leaked publicly and contained 1.4M unique email addresses belonging to customers and instructors. The data also included names, physical addresses, phone numbers, employer information and instructor payout methods including PayPal, cheque and bank transfer.
Email addressesEmployersJob titlesNamesPayment methodsPhone numbersPhysical addresses
7.5M accounts
carnivalcorp.com · breached Apr 2026 · added Apr 24, 2026
Carnival
In April 2026, the notorious hacking collective ShinyHunters claimed they had obtained a substantial volume of data belonging to the Carnival cruise operator and attempted to extort the organisation to prevent the data from being leaked. The following week, the group published the data publicly, which contained 8.7M records with 7.5M unique email addresses. The data contained fields indicating it related to the Mari…
Dates of birthEmail addressesGendersGeographic locationsLoyalty program detailsNamesSalutations
2.1M accounts
amtrak.com · breached Apr 2026 · added Apr 17, 2026
Amtrak
In April 2026, the hacking group ShinyHunters claimed they had breached Amtrak. The group typically compromises organisations' Salesforce instances before demanding a ransom and later, if not paid, dumping the data publicly. They subsequently published the alleged data which contained over 2M unique email addresses along with names, physical addresses and customer support records.
Email addressesNamesPhysical addressesSupport tickets
13.5M accounts
mheducation.com · breached Apr 2026 · added Apr 16, 2026
McGraw Hill
In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt. Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Salesforce on its platform". More than 100GB of data was later publicly distributed, containing 13.5M unique email addresses across multiple files, with additional fields such as name, …
Email addressesNamesPhone numbersPhysical addresses
1.7M accounts
hallmark.com · breached Mar 2026 · added Apr 12, 2026
Hallmark
In March 2026, Hallmark suffered an alleged breach and subsequent extortion after attackers gained access to data stored within Salesforce. The data was later published after the extortion deadline passed, exposing 1.7M unique email addresses across both Hallmark and the Hallmark+ streaming service, along with names, phone numbers, physical addresses and support tickets.
Email addressesNamesPhone numbersPhysical addressesSupport tickets
1.2M accounts
crunchyroll.com · breached Mar 2026 · added Apr 4, 2026
Crunchyroll
In March 2026, the anime streaming service Crunchyroll suffered a data breach alleged to have impacted 6.8M users. The exposed data is reported to have originated from the company's Zendesk support system where "name, login name, email address, IP address, general geographic location and the contents of the support tickets" were exposed. A subset of 1.2M email addresses from an alleged 2M record dataset being sold w…
Email addresses
291.7K accounts
songtrivia2.io · breached Apr 2026 · added Apr 4, 2026
SongTrivia2
In April 2026, the music trivia platform SongTrivia2 suffered a data breach that was subsequently published to a public hacking forum. The data contained a total of 291k unique email addresses sourced from either Google OAuth logins or accounts created on the site, the latter also containing bcrypt password hashes. The data also included names, usernames and avatars.
Auth tokensAvatarsEmail addressesNamesPasswordsUsernames
253.5K accounts
success.com · breached Mar 2026 · added Apr 1, 2026
SUCCESS
In March 2026, the personal development and achievement media brand SUCCESS suffered a data breach. The incident exposed 250k unique email addresses along with names, IP addresses, phone numbers and, for a limited number of staff members, bcrypt password hashes. The data also included orders containing physical addresses and the payment method used. In SUCCESS' disclosure notice, they advised their system had also b…
Device informationEmail addressesIP addressesNamesPasswordsPhone numbersPhysical addressesPurchases
339.8K accounts
breachforums.bf · breached Mar 2026 · added Mar 27, 2026
BreachForums Version 5
In March 2026, a breach of one of the many iterations of the BreachForums hacking forum known as "Version 5" was publicly disclosed. The incident exposed 340k unique email addresses along with usernames and argon2 password hashes.
Email addressesPasswordsUsernames
128.7K accounts
scufgaming.com · breached Jun 2015 · added Mar 26, 2026
Scuf Gaming
In June 2015, custom gaming controller maker Scuf Gaming suffered a data breach. The incident exposed 129k unique email addresses along with usernames, display names, IP addresses and password hashes.
Display namesEmail addressesIP addressesPasswordsUsernames
293K accounts
soundradix.com · breached Mar 2026 · added Mar 26, 2026
Sound Radix
In March 2026, the audio production tools company Sound Radix disclosed a data breach that they subsequently self-submitted to HIBP. The incident impacted 293k unique email addresses and names. Sound Radix advised that it is possible that additional data including hashed passwords may have been exposed, and that no financial or credit card information was impacted.
Email addressesNamesPasswords
222.8K accounts
rsboards.com · breached Dec 2011 · added Mar 23, 2026
RuneScape Boards
In around 2011, the now defunct RuneScape Boards forum (also known as RSBoards) suffered a data breach that was later redistributed as part of a larger corpus of data. The vBulletin-based service exposed 223k unique email addresses along with usernames, IP addresses and salted MD5 password hashes.
Email addressesIP addressesPasswordsUsernames
903.1K accounts
aura.com · breached Mar 2026 · added Mar 18, 2026
Aura
In March 2026, the online safety service Aura disclosed a data breach that exposed 900k unique email addresses. The data was primarily associated with a marketing tool from a previously acquired company, with fewer than 20k active Aura customers affected. Exposed data included names, phone numbers, physical and IP addresses, and customer service notes. Aura advised that no Social Security numbers, passwords or finan…
Customer service recordsEmail addressesIP addressesNamesPhone numbersPhysical addresses
105.8K accounts
divineskins.gg · breached Mar 2026 · added Mar 15, 2026
Divine Skins
In March 2026, the League of Legends custom skins service Divine Skins suffered a data breach. The incident was disclosed via the service's Discord server, where Divine Skins stated that an unauthorised third party accessed part of its systems, deleted all skins from the database and exposed email addresses and usernames. The data also contained a history of purchases made by users.
Email addressesPurchasesUsernames
1.3M accounts
baydoner.com · breached Mar 2026 · added Mar 15, 2026
Baydöner
In March 2026, the Turkish restaurant chain Baydöner suffered a data breach which was subsequently published to a public hacking forum. The incident exposed over 1.2M unique email addresses along with names, phone numbers, cities of residence and plaintext passwords. A small number of records also included Turkish national ID number and date of birth. In their disclosure notice, Baydöner stated that payment and fina…
Dates of birthEmail addressesGendersGeographic locationsGovernment issued IDsNamesPasswordsPhone numbersPurchases
712.9K accounts
provecho.bio · breached Jan 2026 · added Mar 3, 2026
Provecho
In early 2026, data purportedly sourced from the recipe and meal planning service Provecho was alleged to have been obtained in a breach. The exposed data included 713k unique email address along with username and the creator account holders followed. Provecho has been notified and is aware of the claims surrounding the incident.
Email addressesUsernames
495.6K accounts
breached Feb 2026 · added Mar 2, 2026
Lovora
In February 2026, the couples and relationship app Lovora allegedly suffered a data breach that exposed 496k unique email addresses. The data also included users’ display names and profile photos, along with other personal information collected through use of the app. The app’s maker, Plantake, did not respond to multiple attempts to contact them about the incident.
Display namesEmail addressesProfile photos
1.1M accounts
komiko.app · breached Feb 2026 · added Mar 2, 2026
KomikoAI
In February, the AI-powered comic generation platform KomikoAI suffered a data breach. The incident exposed 1M unique email addresses along with names, user posts and the AI prompts used to generate content. The exposed data enables the mapping of individual AI prompts to specific email addresses.
AI promptsEmail addressesForum postsNames
6.1M accounts
odido.nl · breached Feb 2026 · added Feb 26, 2026
Odido
In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt. Shortly after, a total of 6M unique email addresses were published across four separate data releases over consecutive days. The exposed data includes names, physical addresses, phone numbers, bank account numbers, dates of birth, customer service notes and passport, driver’s licence and European national ID numbers…
Bank account numbersCustomer service recordsDates of birthDriver's licensesEmail addressesGendersGovernment issued IDsNamesPassport numbersPhone numbersPhysical addresses
38.3M accounts
canadiantire.ca · breached Oct 2025 · added Feb 25, 2026
Canadian Tire
In October 2025, retailer Canadian Tire was the victim of a data breach that exposed almost 42M records. The data contained 38M unique email addresses along with names, phone numbers and physical addresses. Passwords were stored as PBKDF2 hashes and for a subset of records, dates of birth and partial credit card data were also included (card type, expiry and masked card number). In its disclosure notice, Canadian Ti…
Dates of birthEmail addressesGendersNamesPartial credit card dataPasswordsPhone numbersPhysical addresses
12.5M accounts
cargurus.com · breached Feb 2026 · added Feb 22, 2026
CarGurus
In February 2026, the automotive marketplace CarGurus was the target of a data breach attributed to the threat actor ShinyHunters. Following an attempted extortion, the data was published publicly and contained more than 12M email addresses across multiple files including user account ID mappings, finance pre-qualification application data and dealer account and subscription information. Impacted data also included …
Email addressesIP addressesNamesPhone numbersPhysical addresses
431.4K accounts
carmax.com · breached Jan 2026 · added Feb 20, 2026
CarMax
In January 2026, data allegedly sourced from US automotive retailer CarMax was published online following a failed extortion attempt. The data included 431k unique email addresses along with names, phone numbers and physical addresses.
Email addressesNamesPhone numbersPhysical addresses
967.2K accounts
figure.com · breached Jan 2026 · added Feb 18, 2026
Figure
In February 2026, data obtained from the fintech lending platform Figure was publicly posted online. The exposed data, dating back to January 2026, contained over 900k unique email addresses along with names, phone numbers, physical addresses and dates of birth. Figure confirmed the incident and attributed it to a social engineering attack in which an employee was tricked into providing access.
Dates of birthEmail addressesNamesPhone numbersPhysical addresses
Breach data from Have I Been Pwned. Breaches HIBP marks as sensitive are not listed.