950breaches
17.2Baccounts exposed
8added in 30 days
8.9Maccounts in 30 days
950 results.
191.5K accounts
hackforums.net · breached Jun 2011 · added May 11, 2014
hackforums.net
In June 2011, the hacktivist group known as "LulzSec" leaked one final large data breach they titled "50 days of lulz". The compromised data came from sources such as AT&T;, Battlefield Heroes and the hackforums.net website. The leaked Hack Forums data included credentials and personal information of nearly 200,000 registered forum users.
Dates of birthEmail addressesInstant messenger identitiesIP addressesPasswordsSocial connectionsSpoken languagesTime zonesUser website URLsUsernamesWebsite activity
26.6K accounts
businessacumen.biz · breached Apr 2014 · added May 11, 2014
Business Acumen Magazine
In April 2014, the Australian "Business Acumen Magazine" website was hacked by an attacker known as 1337MiR. The breach resulted in over 26,000 accounts being exposed including usernames, email addresses and password stored with a weak cryptographic hashing algorithm (MD5 with no salt).
Email addressesNamesPasswordsUsernamesWebsite activity
36.8K accounts
bigmoneyjobs.com · breached Apr 2014 · added Apr 8, 2014
BigMoneyJobs
In April 2014, the job site bigmoneyjobs.com was hacked by an attacker known as "ProbablyOnion". The attack resulted in the exposure of over 36,000 user accounts including email addresses, usernames and passwords which were stored in plain text. The attack was allegedly mounted by exploiting a SQL injection vulnerability.
Career levelsEducation levelsEmail addressesNamesPasswordsPhone numbersPhysical addressesSalutationsUser website URLsWebsite activity
158.1K accounts
forums.boxee.com · breached Mar 2014 · added Mar 30, 2014
Boxee
In March 2014, the home theatre PC software maker Boxee had their forums compromised in an attack. The attackers obtained the entire vBulletin MySQL database and promptly posted it for download on the Boxee forum itself. The data included 160k users, password histories, private messages and a variety of other data exposed across nearly 200 publicly exposed tables.
Dates of birthEmail addressesGeographic locationsHistorical passwordsInstant messenger identitiesIP addressesPasswordsPrivate messagesUser website URLsUsernames
3.2K accounts
intgovforum.org · breached Feb 2014 · added Feb 23, 2014
UN Internet Governance Forum
In February 2014, the Internet Governance Forum (formed by the United Nations for policy dialogue on issues of internet governance) was attacked by hacker collective known as Deletesec. Although tasked with "ensuring the security and stability of the Internet", the IGF’s website was still breached and resulted in the leak of 3,200 email addresses, names, usernames and cryptographically stored passwords.
Email addressesNamesPasswordsUsernames
37.8K accounts
muslimdirectory.co.uk · breached Feb 2014 · added Feb 23, 2014
Muslim Directory
In February 2014, the UK guide to services and business known as the Muslim Directory was attacked by the hacker known as @th3inf1d3l. The data was consequently dumped publicly and included the web accounts of tens of thousands of users which contained data including their names, home address, age group, email, website activity and password in plain text.
Age groupsEmail addressesEmployersNamesPasswordsPhone numbersPhysical addressesWebsite activity
55.6K accounts
spirol.com · breached Feb 2014 · added Feb 22, 2014
Spirol
In February 2014, Connecticut based Spirol Fastening Solutions suffered a data breach that exposed over 70,000 customer records. The attack was allegedly mounted by exploiting a SQL injection vulnerability which yielded data from Spirol’s CRM system ranging from customers’ names, companies, contact information and over 55,000 unique email addresses.
Email addressesEmployersJob titlesNamesPhone numbersPhysical addresses
1.1M accounts
forbes.com · breached Feb 2014 · added Feb 15, 2014
Forbes
In February 2014, the Forbes website succumbed to an attack that leaked over 1 million user accounts. The attack was attributed to the Syrian Electronic Army, allegedly as retribution for a perceived "Hate of Syria". The attack not only leaked user credentials, but also resulted in the posting of fake news stories to forbes.com.
Email addressesPasswordsUser website URLsUsernames
2.2K accounts
tesco.com · breached Feb 2014 · added Feb 13, 2014
Tesco
In February 2014, over 2,000 Tesco accounts with usernames, passwords and loyalty card balances appeared on Pastebin. Whilst the source of the breach is not clear, many confirmed the credentials were valid for Tesco and indeed they have a history of poor online security.
Email addressesPasswordsReward program balances
20.9K accounts
bell.ca · breached Feb 2014 · added Feb 1, 2014
Bell (2014 breach)
In February 2014, Bell Canada suffered a data breach via the hacker collective known as NullCrew. The breach included data from multiple locations within Bell and exposed email addresses, usernames, user preferences and a number of unencrypted passwords and credit card data from 40,000 records containing just over 20,000 unique email addresses and usernames.
Credit cardsGendersPasswordsUsernames
148.4K accounts
wptapl.com · breached Jan 2014 · added Feb 1, 2014
WPT Amateur Poker League
In January 2014, the World Poker Tour (WPT) Amateur Poker League website was hacked by the Twitter user @smitt3nz. The attack resulted in the public disclosure of 175,000 accounts including 148,000 email addresses. The plain text password for each account was also included in the breach.
Email addressesPasswords
530.3K accounts
battlefieldheroes.com · breached Jun 2011 · added Jan 23, 2014
Battlefield Heroes
In June 2011 as part of a final breached data dump, the hacker collective "LulzSec" obtained and released over half a million usernames and passwords from the game Battlefield Heroes. The passwords were stored as MD5 hashes with no salt and many were easily converted back to their plain text versions.
PasswordsUsernames
4.6M accounts
snapchat.com · breached Jan 2014 · added Jan 2, 2014
Snapchat
In January 2014 just one week after Gibson Security detailed vulnerabilities in the service, Snapchat had 4.6 million usernames and phone number exposed. The attack involved brute force enumeration of a large number of phone numbers against the Snapchat API in what appears to be a response to Snapchat's assertion that such an attack was "theoretical". Consequently, the breach enabled individual usernames (which are …
Geographic locationsPhone numbersUsernames
38.1K accounts
pixelfederation.com · breached Dec 2013 · added Dec 6, 2013
Pixel Federation
In December 2013, a breach of the web-based game community based in Slovakia exposed over 38,000 accounts which were promptly posted online. The breach included email addresses and unsalted MD5 hashed passwords, many of which were easily converted back to plain text.
Email addressesPasswords
1.2M accounts
gawker.com · breached Dec 2010 · added Dec 4, 2013
Gawker
In December 2010, Gawker was attacked by the hacker collective "Gnosis" in retaliation for what was reported to be a feud between Gawker and 4Chan. Information about Gawkers 1.3M users was published along with the data from Gawker's other web presences including Gizmodo and Lifehacker. Due to the prevalence of password reuse, many victims of the breach then had their Twitter accounts compromised to send Acai berry s…
Email addressesPasswordsUsernames
453.4K accounts
yahoo.com · breached Jul 2012 · added Dec 4, 2013
Yahoo
In July 2012, Yahoo! had their online publishing service "Voices" compromised via a SQL injection attack. The breach resulted in the disclosure of nearly half a million usernames and passwords stored in plain text. The breach showed that of the compromised accounts, a staggering 59% of people who also had accounts in the Sony breach reused their passwords across both services.
Email addressesPasswords
152.4M accounts
adobe.com · breached Oct 2013 · added Dec 4, 2013
Adobe
In October 2013, 153 million Adobe accounts were breached with each containing an internal ID, username, email, encrypted password and a password hint in plain text. The password cryptography was poorly done and many were quickly resolved back to plain text. The unencrypted hints also disclosed much about the passwords adding further to the risk that hundreds of millions of Adobe customers already faced.
Email addressesPassword hintsPasswordsUsernames
37.1K accounts
sony.com · breached Jun 2011 · added Dec 4, 2013
Sony
In 2011, Sony suffered breach after breach after breach — it was a very bad year for them. The breaches spanned various areas of the business ranging from the PlayStation network all the way through to the motion picture arm, Sony Pictures. A SQL Injection vulnerability in sonypictures.com lead to tens of thousands of accounts across multiple systems being exposed complete with plain text passwords.
Dates of birthEmail addressesGendersNamesPasswordsPhone numbersPhysical addressesUsernames
859.8K accounts
stratfor.com · breached Dec 2011 · added Dec 4, 2013
Stratfor
In December 2011, "Anonymous" attacked the global intelligence company known as "Stratfor" and consequently disclosed a veritable treasure trove of data including hundreds of gigabytes of email and tens of thousands of credit card details which were promptly used by the attackers to make charitable donations (among other uses). The breach also included 860,000 user accounts complete with email address, time zone, so…
Credit cardsEmail addressesNamesPasswordsPhone numbersPhysical addressesUsernames
56K accounts
vodafone.is · breached Nov 2013 · added Nov 30, 2013
Vodafone
In November 2013, Vodafone in Iceland suffered an attack attributed to the Turkish hacker collective "Maxn3y". The data was consequently publicly exposed and included user names, email addresses, social security numbers, SMS message, server logs and passwords from a variety of different internal sources.
Credit cardsEmail addressesGovernment issued IDsIP addressesNamesPasswordsPhone numbersPhysical addressesPurchasesSMS messagesUsernames
Breach data from Have I Been Pwned. Breaches HIBP marks as sensitive are not listed.