950breaches
17.2Baccounts exposed
8added in 30 days
8.9Maccounts in 30 days
950 results.
591K accounts
paddypower.com · breached Oct 2010 · added Oct 11, 2015
Paddy Power
In October 2010, the Irish bookmaker Paddy Power suffered a data breach that exposed 750,000 customer records with nearly 600,000 unique email addresses. The breach was not disclosed until July 2014 and contained extensive personal information including names, addresses, phone numbers and plain text security questions and answers.
Account balancesDates of birthEmail addressesIP addressesNamesPhone numbersPhysical addressesSecurity questions and answersUsernamesWebsite activity
19.9K accounts
myvidster.com · breached Aug 2015 · added Oct 10, 2015
MyVidster (2015)
In August 2015, the social video sharing and bookmarking site MyVidster was hacked and nearly 20,000 accounts were dumped online. The dump included usernames, email addresses and hashed passwords.
Email addressesPasswordsUsernames
2.3M accounts
patreon.com · breached Oct 2015 · added Oct 2, 2015
Patreon
In October 2015, the crowdfunding site Patreon was hacked and over 16GB of data was released publicly. The dump included almost 14GB of database records with more than 2.3M unique email addresses, millions of personal messages and passwords stored as bcrypt hashes.
Email addressesPasswordsPayment historiesPhysical addressesPrivate messagesWebsite activity
3M accounts
xsplit.com · breached Nov 2013 · added Aug 8, 2015
XSplit
In November 2013, the makers of gaming live streaming and recording software XSplit was compromised in an online attack. The data breach leaked almost 3M names, email addresses, usernames and hashed passwords.
Email addressesNamesPasswordsUsernames
32.3K accounts
hackingteam.com · breached Jul 2015 · added Jul 12, 2015
Hacking Team
In July 2015, the Italian security firm Hacking Team suffered a major data breach that resulted in over 400GB of their data being posted online via a torrent. The data searchable on "Have I Been Pwned?" is from 189GB worth of PST mail folders in the dump. The contents of the PST files is searchable on Wikileaks.
Email addressesEmail messages
47.3K accounts
hemmakvall.se · breached Jul 2015 · added Jul 9, 2015
Hemmakväll
In July 2015, the Swedish video store chain Hemmakväll was hacked and nearly 50k records dumped publicly. The disclosed data included various attributes of their customers including email and physical addresses, names and phone numbers. Passwords were also leaked, stored with a weak MD5 hashing algorithm.
Email addressesNamesPasswordsPhone numbersPhysical addresses
252.8K accounts
myrepospace.com · breached Jul 2015 · added Jul 8, 2015
myRepoSpace
In July 2015, the Cydia repository known as myRepoSpace was hacked and user data leaked publicly. Cydia is designed to facilitate the installation of apps on jailbroken iOS devices. The repository service was allegedly hacked by @its_not_herpes and 0x8badfl00d in retaliation for the service refusing to remove pirated tweaks.
Email addressesIP addressesPasswordsUsernames
16K accounts
minecraftpeforum.net · breached May 2015 · added Jun 30, 2015
Minecraft Pocket Edition Forum
In May 2015, the Minecraft Pocket Edition forum was hacked and over 16k accounts were dumped public. Allegedly hacked by @rmsg0d, the forum data included numerous personal pieces of data for each user. The forum has subsequently been decommissioned.
Email addressesIP addressesPasswordsUsernames
1.2M accounts
nextgenupdate.com · breached Apr 2014 · added Jun 5, 2015
NextGenUpdate
Early in 2014, the video game website NextGenUpdate reportedly suffered a data breach that disclosed almost 1.2 million accounts. Amongst the data breach was usernames, email addresses, IP addresses and salted and hashed passwords.
Email addressesIP addressesPasswordsUsernames
3.5M accounts
sprashivai.ru · breached May 2015 · added May 12, 2015
Спрашивай.ру
In May 2015, Спрашивай.ру (a the Russian website for anonymous reviews) was reported to have had 6.7 million user details exposed by a hacker known as "w0rm". Intended to be a site for expressing anonymous opinions, the leaked data included email addresses, birth dates and other personally identifiable data about almost 3.5 million unique email addresses found in the leak.
Dates of birthEmail addressesGendersGeographic locationsIP addressesPasswordsSpoken languages
107.8K accounts
trai.gov.in · breached Apr 2015 · added Apr 27, 2015
Telecom Regulatory Authority of India
In April 2015, the Telecom Regulatory Authority of India (TRAI) published tens of thousand of emails sent by Indian citizens supporting net neutrality as part of the SaveTheInternet campaign. The published data included lists of emails including the sender's name and email address as well as the contents of the email as well, often with signatures including other personal data.
Email addressesEmail messages
139.4K accounts
starnet.md · breached Feb 2015 · added Apr 11, 2015
StarNet
In February 2015, the Moldavian ISP "StarNet" had it's database published online. The dump included nearly 140k email addresses, many with personal details including contact information, usage patterns of the ISP and even passport numbers.
Customer interactionsDates of birthEmail addressesGendersIP addressesMAC addressesNamesPassport numbersPasswordsPhone numbers
48.6K accounts
quantumbooter.net · breached Mar 2014 · added Apr 4, 2015
Quantum Booter
In March 2014, the booter service Quantum Booter (also referred to as Quantum Stresser) suffered a breach which lead to the disclosure of their internal database. The leaked data included private discussions relating to malicious activity Quantum Booter users were performing against online adversaries, including the IP addresses of those using the service to mount DDoS attacks.
Email addressesIP addressesPasswordsPrivate messagesUsernamesWebsite activity
612.4K accounts
thishabboforum.com · breached Jan 2014 · added Mar 28, 2015
ThisHabbo Forum
In 2014, the ThisHabbo forum (a fan site for Habbo.com, a Finnish social networking site) appeared among a list of compromised sites which has subsequently been removed from the internet. Whilst the actual date of the exploit is not clear, the breached data includes usernames, email addresses, IP addresses and salted hashes of passwords. A further 584k records were added from a more comprehensive breach file provide…
Email addressesIP addressesPasswordsUsernames
40.3K accounts
flashback.se · breached Feb 2015 · added Feb 12, 2015
Flashback
In February 2015, the Swedish forum known as Flashback had sensitive internal data on 40k members published via the tabloid newspaper Aftonbladet. The data was allegedly sold to them via Researchgruppen (The Research Group) who have a history of exposing otherwise anonymous users, primarily those who they believe participate in "troll like" behaviour. The compromised data includes social security numbers, home and e…
Email addressesGovernment issued IDsPhysical addresses
19.2K accounts
crackcommunity.com · breached Sep 2013 · added Feb 3, 2015
Crack Community
In late 2013, the Crack Community forum specialising in cracks for games was compromised and over 19k accounts published online. Built on the MyBB forum platform, the compromised data included email addresses, IP addresses and salted MD5 passwords.
Email addressesIP addressesPasswordsUsernamesWebsite activity
13.5K accounts
lizardstresser.su · breached Jan 2015 · added Jan 18, 2015
Lizard Squad
In January 2015, the hacker collective known as "Lizard Squad" created a DDoS service by the name of "Lizard Stresser" which could be procured to mount attacks against online targets. Shortly thereafter, the service suffered a data breach which resulted in the public disclosure of over 13k user accounts including passwords stored in plain text.
Email addressesPasswordsUsernames
648.2K accounts
pizza.dominos.be · breached Jun 2014 · added Jan 4, 2015
Domino's
In June 2014, Domino's Pizza in France and Belgium was hacked by a group going by the name "Rex Mundi" and their customer data held to ransom. Domino's refused to pay the ransom and six months later, the attackers released the data along with troves of other hacked accounts. Amongst the customer data was passwords stored with a weak MD5 hashing algorithm and no salt.
Email addressesNamesPasswordsPhone numbersPhysical addresses
180.5K accounts
ahashare.com · breached May 2013 · added Nov 6, 2014
AhaShare.com
In May 2013, the torrent site AhaShare.com suffered a breach which resulted in more than 180k user accounts being published publicly. The breach included a raft of personal information on registered users plus despite assertions of not distributing personally identifiable information, the site also leaked the IP addresses used by the registered identities.
Email addressesGendersGeographic locationsIP addressesPartial dates of birthPasswordsUsernamesWebsite activity
1.2M accounts
forum.btcsec.com · breached Sep 2014 · added Sep 12, 2014
Yandex Dump
In September 2014, news broke of a massive leak of accounts from Yandex, the Russian search engine giants who also provides email services. The purported million "breached" accounts were disclosed at the same time as nearly 5M mail.ru accounts with both companies claiming the credentials were acquired via phishing scams rather than being obtained as a result of direct attacks against their services.
Email addressesPasswords
16.6M accounts
mail.ru · breached Sep 2014 · added Sep 12, 2014
Unverified
mail.ru Dump
In September 2014, several large dumps of user accounts appeared on the Russian Bitcoin Security Forum including one with nearly 5M email addresses and passwords, predominantly on the mail.ru domain. Whilst unlikely to be the result of a direct attack against mail.ru, the credentials were confirmed by many as legitimate for other services they had subscribed to. Further data allegedly valid for mail.ru and containin…
Email addressesPasswords
4.8M accounts
forum.btcsec.com · breached Jan 2014 · added Sep 10, 2014
Bitcoin Security Forum Gmail Dump
In September 2014, a large dump of nearly 5M usernames and passwords was posted to a Russian Bitcoin forum. Whilst commonly reported as 5M "Gmail passwords", the dump also contained 123k yandex.ru addresses. Whilst the origin of the breach remains unclear, the breached credentials were confirmed by multiple source as correct, albeit a number of years old.
Email addressesPasswords
116.5K accounts
pokemoncreed.net · breached Aug 2014 · added Aug 10, 2014
Pokémon Creed
In August 2014, the Pokémon RPG website Pokémon Creed was hacked after a dispute with rival site, Pokémon Dusk. In a post on Facebook, "Cruz Dusk" announced the hack then pasted the dumped MySQL database on pkmndusk.in. The breached data included over 116k usernames, email addresses and plain text passwords.
Email addressesGendersIP addressesPasswordsUsernamesWebsite activity
104.1K accounts
insanelyi.com · breached Jul 2014 · added Jul 22, 2014
Insanelyi
In July 2014, the iOS forum Insanelyi was hacked by an attacker known as Kim Jong-Cracks. A popular source of information for users of jailbroken iOS devices running Cydia, the Insanelyi breach disclosed over 104k users' emails addresses, user names and weakly hashed passwords (salted MD5).
Email addressesPasswordsUsernamesWebsite activity
45K accounts
loungeboard.net · breached Aug 2013 · added Jul 6, 2014
Lounge Board
At some point in 2013, 45k accounts were breached from the Lounge Board "General Discussion Forum" and then dumped publicly. Lounge Board was a MyBB forum launched in 2012 and discontinued in mid 2013 (the last activity in the logs was from August 2013).
Email addressesIP addressesNamesPasswordsPrivate messagesUsernamesWebsite activity
16.9K accounts
verified.cm · breached Jan 2014 · added Jul 6, 2014
Verified
In January 2014, one of the largest communities of Eastern Europe cybercriminals known as "Verified" was hacked. The breach exposed nearly 17k users of the vBulletin forum including their personal messages and other potentially personally identifiable information.
Email addressesHistorical passwordsIP addressesPasswordsPrivate messagesUsernamesWebsite activity
5.8K accounts
astropid.com · breached Dec 2013 · added Jul 6, 2014
Astropid
In December 2013, the vBulletin forum for the social engineering site known as "AstroPID" was breached and leaked publicly. The site provided tips on fraudulently obtaining goods and services, often by providing a legitimate "PID" or Product Information Description. The breach resulted in nearly 6k user accounts and over 220k private messages between forum members being exposed.
Email addressesInstant messenger identitiesIP addressesNamesPasswordsPrivate messagesUsernamesWebsite activity
855.2K accounts
mangatraders.com · breached Jun 2014 · added Jun 10, 2014
Manga Traders
In June 2014, the Manga trading website Mangatraders.com had the usernames and passwords of over 900k users leaked on the internet (approximately 855k of the emails were unique). The passwords were weakly hashed with a single iteration of MD5 leaving them vulnerable to being easily cracked.
Email addressesPasswords
202.7K accounts
win7vista.com · breached Sep 2013 · added Jun 1, 2014
Win7Vista Forum
In September 2013, the Win7Vista Windows forum (since renamed to the "Beyond Windows 9" forum) was hacked and later had its internal database dumped. The dump included over 200k members’ personal information and other internal data extracted from the forum.
Email addressesInstant messenger identitiesIP addressesNamesPasswordsPrivate messagesUsernamesWebsite activity
227.7K accounts
cannabis.com · breached Feb 2014 · added Jun 1, 2014
Cannabis.com
In February 2014, the vBulletin forum for the Marijuana site cannabis.com was breached and leaked publicly. Whilst there has been no public attribution of the breach, the leaked data included over 227k accounts and nearly 10k private messages between users of the forum.
Dates of birthEmail addressesGeographic locationsHistorical passwordsInstant messenger identitiesIP addressesPasswordsPrivate messagesUsernamesWebsite activity
Breach data from Have I Been Pwned. Breaches HIBP marks as sensitive are not listed.