Category: Have I Been Pwned latest breaches

GGCorp – 2,376,330 breached accounts

In August 2022, the MMORPG website GGCorp suffered a data breach that exposed almost 2.4M unique email addresses. The data also included IP addresses, usernames and MD5 password hashes. This article has been indexed from Have I Been Pwned latest…

Lolzteam – 398,011 breached accounts

In May 2018, the Russian hacking forum Lolzteam suffered a data breach that exposed 400k members. The impacted data included usernames and email addresses which were later redistributed via another hacking forum. The data was provided to HIBP by a…

E-Pal – 108,887 breached accounts

In October 2022, the service dedicated to finding friends on Discord known as E-Pal disclosed a data breach. The compromised data included over 100k unique email addresses and usernames spanning approximately 1M orders. The data was subsequently distributed via a…

Doomworld – 34,478 breached accounts

In October 2022, the Doomworld fourm suffered a data breach that exposed 34k member records. The data included email and IP addresses, usernames and bcrypt password hashes. This article has been indexed from Have I Been Pwned latest breaches Read…

E-Pal – 108,887 breached accounts

In October 2022, the service dedicated to finding friends on Discord known as E-Pal disclosed a data breach. The compromised data included over 100k unique email addresses and usernames spanning approximately 1M orders. The data was subsequently distributed via a…

Doomworld – 34,478 breached accounts

In October 2022, the Doomworld fourm suffered a data breach that exposed 34k member records. The data included email and IP addresses, usernames and bcrypt password hashes. This article has been indexed from Have I Been Pwned latest breaches Read…

Bhinneka – 1,274,340 breached accounts

In early 2020, the Indonesian consumer electronics website Bhinneka suffered a data breach that exposed almost 1.3M customer records. The data included email and physical addresses, names, genders, dates of birth, phone numbers and salted password hashes. This article has…

Wakanim – 6,706,951 breached accounts

In August 2022, the European streaming service Wakanim suffered a data breach which was subsequently advertised and sold on a popular hacking forum. The breach exposed 6.7M customer records including email, IP and physical addresses, names and usernames. This article…

Bhinneka – 1,274,340 breached accounts

In early 2020, the Indonesian consumer electronics website Bhinneka suffered a data breach that exposed almost 1.3M customer records. The data included email and physical addresses, names, genders, dates of birth, phone numbers and salted password hashes. This article has…

TAP Air Portugal – 5,067,990 breached accounts

In August 2022, the Portuguese airline TAP Air Portugal was the target of a ransomware attack perpetrated by the Ragnar Locker gang who later leaked the compromised data via a public dark web site. Over 5M unique email addresses were…

Brand New Tube – 349,627 breached accounts

In August 2022, the streaming website Brand New Tube suffered a data breach that exposed the personal information of almost 350k subscribers. The impacted data included email and IP addresses, usernames, genders, passwords stored as unsalted SHA-1 hashes and private…

START – 7,455,386 breached accounts

In August 2022, news broke of an attack against the Russian streaming service "START". The incident led to the exposure of 44M records containing 7.4M unique email addresses. The impacted data also included the subscriber’s country and password hash. START…

Banorte – 2,107,000 breached accounts

In August 2022, millions of records from Mexican bank "Banorte" were publicly dumped on a popular hacking forum including 2.1M unique email addresses, physical addresses, names, phone numbers, RFC (tax) numbers, genders and bank balances. Banorte have stated that the…

SitePoint – 1,021,790 breached accounts

In June 2020, the web development site SitePoint suffered a data breach that exposed over 1M customer records. Impacted data included email and IP addresses, names, usernames, bios and passwords stored as bcrypt hashes. This article has been indexed from…

Twitter – 6,682,453 breached accounts

In January 2022, a vulnerability in Twitter’s platform allowed an attacker to build a database of the email addresses and phone numbers of millions of users of the social platform. In a disclosure notice later shared in August 2022, Twitter…

QuestionPro – 22,229,637 breached accounts

In May 2022, the survey website QuestionPro was the target of an extortion attempt relating to an alleged data breach. Over 100GB of data containing 22M unique email addresses (some of which appear to be generated by the platform), are…

Tuned Global – 985,586 breached accounts

In January 2021, data from a number of breached services including Tuned Global were released to a public hacking forum. The breach appears to date back to 2016 and includes 985k records containing email addresses, names, a small number of…

Mecho Download – 437,928 breached accounts

In October 2013, the (now defunct) downloads website "Mecho Download" suffered a data breach that exposed 438k records. Data from the vBulletin based website included email and IP addresses, usernames and passwords stored as salted MD5 hashes. This article has…

Battlefy – 83,610 breached accounts

In January 2016, the esports website Battlefy suffered a data breach that exposed 83k customer records. The impacted data included email addresses, usernames and passwords stored as bcrypt hashes. This article has been indexed from Have I Been Pwned latest…

Paytm – 3,395,101 breached accounts

In August 2020, the Indian payment provider Paytm was reported as having suffered a data breach and subsequent ransom demand, after which the data was circulated publicly. Although Paytm denied the breach at the time, verification with impacted HIBP subscribers…

PPCGeeks – 492,518 breached accounts

In August 2016, the pocket PC fan site forum PPCGeeks suffered a data breach that exposed over 490k records. The breach of the vBulletin forum exposed email and IP addresses, usernames, dates of birth and passwords stored as salted MD5…

JukinMedia – 314,290 breached accounts

In October 2021, the "global leader in user-generated entertainment" Jukin Media suffered a data breach. The breach exposed 13GB of code, configuration and data consisting of 314k unique email addresses along with names, phone numbers, IP addresses and bcrypt password…

Famm – 535,240 breached accounts

In late 2020, the Japanese family photos website Famm suffered a data breach that subsequently exposed 1.3M customer records, including 535k unique email addresses. Impacted data also included names, dates of birth, genders and passwords stored as SHA-256 hashes. This…

Eskimi – 1,197,620 breached accounts

In late 2020, the AdTech platform Eskimi suffered a data breach that exposed 26M records with 1.2M unique email addresses. The data included usernames, dates of birth, genders and passwords stored as unsalted MD5 hashes. This article has been indexed…

La Poste Mobile – 533,886 breached accounts

In July 2022, the French telecommunications company La Poste Mobile was the target of an attack by the LockBit ransomware which resulted in company data being published publicly. The impacted data included 533k unique email addresses along with names, physical…

Mangatoon – 23,040,238 breached accounts

In May 2022, the Hong Kong based Manga service Mangatoon suffered a data breach that exposed 23M subscriber records. The breach exposed names, email addresses, genders, social media account identities, auth tokens from social logins and passwords stored as salted…

Capital Economics – 263,829 breached accounts

In December 2020, the economic research company Capital Economics suffered a data breach that exposed 263k customer records. The exposed data included email and physical addresses, names, phone numbers, job titles and the employer of impacted customers. This article has…

Bookchor – 498,297 breached accounts

In January 2021, the Indian book trading website Bookchor suffered a data breach that exposed half a million customer records. The exposed data included email and IP addresses, names, genders, dates of birth, phone numbers and passwords stored as unsalted…

Bourse des Vols – 1,460,130 breached accounts

In January 2021, the French travel company Bourse des Vols suffered a data breach that exposed 1.46M unique email addresses across more than 1.2k .sql files and over 9GB of data. The impacted data exposed personal information and travel histories…

DivX SubTitles – 783,058 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In approximately 2010, the now defunct website DivX SubTitles suffered a data breach that exposed 783k user accounts including email addresses, usernames and plain text passwords. The data…

Adecco – 4,284,538 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In March 2021, news broke of a massive data breach impacting millions of Adecco customers in South America which was subsequently sold on a popular hacking forum. The…

Preen.Me – 236,105 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In May 2020, social media marketing company Preen.Me was the target of a ransom attack that resulted in hundreds of thousands of records being publicly posted. Over 236k…

Amart Furniture – 108,940 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In May 2022, the Australian retailer Amart Furniture advised that their warranty claims database hosted on Amazon Web Services had been the target of a cyber attack. Over…

Wendy’s – 52,485 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In March 2018, Wendy’s in the Philippines suffered a data breach which impacted over 52k customers and job applicants. The breach exposed extensive personal information including names, email…

SirHurt – 90,655 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In April 2021, the the Roblox cheats website SirHurt suffered a data breach that exposed over 90k customer records. The exposed data included email and IP addresses, usernames…

Fanpass – 112,251 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In April 2022, the UK based website for buying and selling soccer tickets Fanpass suffered a data breach which exposed 112k customer records. Impacted data includes names, phone…

OGUsers (2021 breach) – 348,302 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In April 2021, the account hijacking and SIM swapping forum OGusers suffered a data breach, the fourth since December 2018. The breach was subsequently sold on a rival…

BlackBerry Fans – 174,168 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In May 2022, the Chinese BlackBerry enthusiasts website BlackBerry Fans suffered a data breach that exposed 174k member records. The impacted data included usernames, email and IP addresses…

Read Novel (unverified) – 22,424,472 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In May 2019, the Chinese literature website Read Novel allegedly suffered a data breach that exposed 22M unique email addresses. Data also included usernames, genders, phone numbers and…

Read Novel (unverified) – 22,424,472 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In May 2019, the Chinese literature website Read Novel allegedly suffered a data breach that exposed 22M unique email addresses. Data also included usernames, genders, phone numbers and…

BlackBerry Fans – 174,168 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In May 2022, the Chinese BlackBerry enthusiasts website BlackBerry Fans suffered a data breach that exposed 174k member records. The impacted data included usernames, email and IP addresses…

OGUsers (2021 breach) – 348,302 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In April 2021, the account hijacking and SIM swapping forum OGusers suffered a data breach, the fourth since December 2018. The breach was subsequently sold on a rival…

Paragon Cheats – 188,089 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In May 2021, the Grand Theft Auto Online cheats website "Paragon Cheats" suffered a data breach that lead to the shutdown of the service. The breach exposed 188k…

PayHere – 1,580,249 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In late March 2022, the Sri Lankan payment gateway PayHere suffered a data breach that exposed more than 65GB of payment records including over 1.5M unique email addresses.…

Aimware – 305,470 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In mid-2019, the video game cheats website "Aimware" suffered a data breach that exposed hundreds of thousands of subscribers’ personal information. Data included email and IP addresses, usernames,…

Devil-Torrents.pl – 63,451 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In early 2021, the Polish torrents website Devil-Torrents.pl suffered a data breach. A subset of the data including 63k unique email addresses and cracked passwords were subsequently socialised…

Royal Enfield – 420,873 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In January 2020, motorcycle maker Royal Enfield left a database publicly exposed that resulted in the inadvertent publication of over 400k customers. The impacted data included email and…

ZAP-Hosting – 746,682 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In November 2021, web host ZAP-Hosting suffered a data breach that exposed over 60GB of data containing 746k unique email addresses. The breach also contained support chat logs,…

CDEK (unverified) – 19,218,203 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In early 2022, a collective known as IT Army whose stated goal is to "completely de-anonymise most Russian users by leaking hundreds of gigabytes of databases" published over…

Robinhood – 5,003,937 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In November 2021, the online trading platform Robinhood suffered a data breach after a customer service representative was socially engineered. The incident exposed over 5M customer email addresses…

MacGeneration – 101,004 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In January 2022, the French Apple news website MacGeneration suffered a data breach. The incident exposed over 100k usernames, email addresses and passwords stored as salted SHA-512 hashes.…

NVIDIA – 71,335 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In February 2022, microchip company NVIDIA suffered a data breach that exposed employee credentials and proprietary code. Impacted data included over 70k employee email addresses and NTLM password…

GiveSendGo – 89,966 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In February 2022, the Christian fundraising service GiveSendGo suffered a data breach which exposed the personal data of 90k donors to the Canadian "Freedom Convoy" protest against vaccine…

GiveSendGo – 89,966 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In February 2022, the Christian fundraising service GiveSendGo suffered a data breach which exposed the personal data of 90k donors to the Canadian "Freedom Convoy" protest against vaccine…

RedDoorz – 5,890,277 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In September 2020, the hotel management & booking platform RedDoorz suffered a data breach that exposed over 5.8M user accounts. The breached data included names, email addresses, phone…

BTC-Alpha – 362,426 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In November 2021, the crypto exchange platform BTC-Alpha suffered a ransomware attack data breach after which customer data was publicly dumped. The impacted data included 362k email and…

Upstox – 111,002 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In April 2021, Indian brokerage firm Upstox suffered a data breach. The incident exposed extensive personal information on over 100k customers including names, genders, dates of birth, physical…

Open Subtitles – 6,783,158 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In August 2021, the subtitling website Open Subtitles suffered a data breach and subsequent ransom demand. The breach exposed almost 7M subscribers’ personal data including email and IP…

Open Subtitles – 6,783,158 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In August 2021, the subtitling website Open Subtitles suffered a data breach and subsequent ransom demand. The breach exposed almost 7M subscribers’ personal data including email and IP…

Upstox – 111,002 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In April 2021, Indian brokerage firm Upstox suffered a data breach. The incident exposed extensive personal information on over 100k customers including names, genders, dates of birth, physical…

FlexBooker – 3,756,794 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In December 2021, the online booking service FlexBooker suffered a data breach that exposed 3.7 million accounts. The data included email addresses, names, phone numbers and for a…

DatPiff – 7,476,940 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In late 2021, email address and plain text password pairs from the rap mixtape website DatPiff appeared for sale on a popular hacking forum. The data allegedly dated…

RedLine Stealer – 441,657 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In December 2021, logs from the RedLine Stealer malware were left publicly exposed and were then obtained by security researcher Bob Diachenko. The data included usernames, email addresses…

Protemps – 49,591 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In October 2021, the Singaporean recruitment website Protemps suffered a data breach that exposed almost 50,000 unique email addresses. The impacted data includes names, email and physical addresses,…

Gravatar – 113,990,759 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In October 2020, a security researcher published a technique for scraping large volumes of data from Gravatar, the service for providing globally unique avatars . The scraped data…

IDC Games – 3,966,871 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In March 2021, 4 million records sourced from IDC Games were shared on a public hacking forum. The data included usernames, email addresses and passwords stored as salted…

Ducks Unlimited – 1,324,364 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In mid-2021, Risk Based Security reported on a database sourced from Ducks Unlimited being traded online. The data dated back to January 2021 and contained 1.3M unique email…

ActMobile (unverified) – 1,583,193 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In October 2021, security researcher Bob Diachenko discovered an exposed database he attributed to ActMobile, the operators of Dash VPN and FreeVPN. The exposed data included 1.6 million…

ActMobile (unverified) – 1,583,193 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In October 2021, security researcher Bob Diachenko discovered an exposed database he attributed to ActMobile, the operators of Dash VPN and FreeVPN. The exposed data included 1.6 million…

CoinMarketCap – 3,117,548 breached accounts

This article has been indexed from Have I Been Pwned latest breaches During October 2021, 3.1 million email addresses with accounts on the cryptocurrency market capitalisation website CoinMarketCap were discovered being traded on hacking forums. Whilst the email addresses were…

Thingiverse – 228,102 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In October 2021, a database backup taken from the 3D model sharing service Thingiverse began extensively circulating within the hacking community. Dating back to October 2020, the 36GB…

Playbook – 50,538 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In September 2021, a publicly accessible PostgresSQL database belonging to the Playbook service was identified. Run by VC firm Plug and Play Ventures, the database had been exposed…

Fantasy Football Hub – 66,479 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In October 2021, the fantasy premier league (soccer) website Fantasy Football Hub suffered a data breach that exposed 66 thousand unique email addresses. The data included names, usernames,…

Republican Party of Texas – 72,596 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In September 2021, the Republican Party of Texas was hacked by a group claiming to be "Anonymous" in retaliation for the state’s controversial abortion ban. The September defacement…

Ajarn – 266,399 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In September 2021, the Thai-based English language teaching website Ajarn discovered they’d been the victim of a data breach dating back to December 2018. The breach was self-submitted…

Epik – 15,003,961 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In September 2021, the domain registrar and web host Epik suffered a significant data breach, allegedly in retaliation for hosting alt-right websites. The breach exposed a huge volume…

IndiaMART – 20,154,583 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In August 2021, 38 million records from Indian e-commerce company IndiaMART were found being traded on a popular hacking forum. Dated several months earlier, the data included over…

Imavex – 878,209 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In August 2021, the website development company Imavex suffered a data breach that exposed 878 thousand unique email addresses. The data included user records containing names, usernames and…

SubaGames – 6,137,666 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In November 2016, the game developer Suba Games suffered a data breach which led to the exposure of 6.1M unique email addresses. Impacted data also included usernames and…

Eatigo – 2,789,609 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In October 2018, the restaurant reservation service Eatigo suffered a data breach that exposed 2.8 million accounts. The data included email addresses, names, phone numbers, social media profiles,…

OrderSnapp – 1,304,447 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In June 2020, the restaurant solutions provider OrderSnapp suffered a data breach which exposed 1.3M unique email addresses. Impacted data also included names, phone numbers, dates of birth…

MMG Fusion – 2,660,295 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In December 2020, the dental practice management service MMG Fusion was the victim of a data breach which exposed 2.6M unique email addresses. The data also included patient…

Audi – 2,743,539 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In August 2019, Audio USA suffered a data breach after a vendor left data unsecured and exposed on the internet. The data contained 2.7M unique email addresses along…

Guntrader – 112,031 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In July 2021, the United Kingdom based website Guntrader suffered a data breach that exposed 112k unique email addresses. Extensive personal information was also exposed including names, phone…

Short Édition – 505,466 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In June 2021, the French publishing house of short literature Short Édition suffered a data breach that exposed 505k records. Impacted data included email and physical addresses, names,…

Short Édition – 505,466 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In June 2021, the French publishing house of short literature Short Édition suffered a data breach that exposed 505k records. Impacted data included email and physical addresses, names,…

Raychat – 938,981 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In January 2021, the now defunct Iranian social media platform Raychat suffered a data breach that exposed 939 thousand unique email addresses. The data included names, IP addresses,…

Teespring – 8,234,193 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In April 2020, the custom printed apparel website Teespring suffered a data breach that exposed 8.2 million customer records. The data included email addresses, names, geographic locations and…

yotepresto.com – 1,444,629 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In June 2020, the Mexican lending platform yotepresto.com suffered a data breach. Over 1.4 million customers were impacted by the breach which disclosed email and IP addresses, usernames…

University of California – 547,422 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In December 2020, the University of California, Berkeley suffered a data breach due to vulnerability in in a third-party provider, Accellion. The breach exposed extensive personal data on…

Fotolog – 16,717,854 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In December 2018, the photo sharing social network Fotolog suffered a data breach that exposed 16.7 million unique email addresses. The data also included usernames and unsalted SHA-256…

Dominos India – 22,527,655 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In April 2021, 13TB of compromised Dominos India appeared for sale on a hacking forum after which the company acknowledged a major data breach they dated back to…

JD – 77,449,341 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In 2013 (exact date unknown), the Chinese e-commerce service JD suffered a data breach that exposed 13GB of data containing 77 million unique email addresses. The data also…

Moneycontrol – 762,874 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In April 2021, hackers posted data for sale originating from the online Indian financial platform, Moneycontrol. The data included 763 thousand unique email addresses (allegedly a subset of…

Yam – 13,258,797 breached accounts

This article has been indexed from Have I Been Pwned latest breaches In June 2013, the Taiwanese website Yam.com suffered a data breach which was shared to a popular hacking forum in 2021. The data included 13 million unique email…