Data Breaches

Check your email or password

Find out whether your email address or a password are leaked somewhere.

Check your email address or password…

  1. Terrace of Hialeah

    FL, US · Healthcare Provider · Hacking/IT Incident
    1.2Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  2. ASPEN HEALTHCARE SERVICES INC

    TX, US · Healthcare Provider · Hacking/IT Incident
    7.2Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Electronic Medical Record

  3. ESHA, Inc.

    TX, US · Business Associate · Hacking/IT Incident
    76.9Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  5. DemandScience by Pure Incubation

    demandscience.com
    121.8Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Employers
    • Job titles
    • Names
    • Phone numbers
    • Physical addresses
    • Social media profiles
    In early 2024, a large corpus of data from DemandScience (a company owned by Pure Incubation), appeared for sale on a popular hacking forum. Later attributed to a leak from a decommissioned legacy system, the breach contained extensive data that was largely business contact information aggregated from public sources. Specifically, the data included 122M unique corporate email addresses, physical addresses, phone numbers, employers and job titles. It also included names and for many individuals, a link to their LinkedIn profile.

  6. Radiologic Medical Services, P.C.

    IA, US · Healthcare Provider · Hacking/IT Incident
    56.9Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

  8. Hot Topic

    hottopic.com
    56.9Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Dates of birth
    • Email addresses
    • Genders
    • Names
    • Partial credit card data
    • Phone numbers
    • Physical addresses
    • +2 more
    In October 2024, retailer Hot Topic suffered a data breach that exposed 57 million unique email addresses. The impacted data also included physical addresses, phone numbers, purchases, genders, dates of birth and partial credit data containing card type, expiry and last 4 digits.

  9. Huron Inc. Health Plan

    MI, US · Health Plan · Unauthorized Access/Disclosure
    750people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  10. Great Plains Regional Medical Center

    OK, US · Healthcare Provider · Hacking/IT Incident
    133.1Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  11. Earth 2

    earth2.io
    421Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Usernames
    In October 2024, 421k unique email addresses from the virtual earth game Earth 2 were derived from embedded Gravatar images. Appearing alongside player usernames, the root cause was related to how Gravatar presents links to avatars as MD5 hashes within consuming services, a feature Earth 2 advised has now been disabled on their platform. This incident did not expose any further personal information, passwords or financial data.

  12. Dennis Kirk

    denniskirk.com
    1.4Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Geographic locations
    • Names
    • Phone numbers
    • Purchases
    In October 2024, almost 20GB of data containing 1.3M unique email addresses from motorcycle supplies store Dennis Kirk was circulated. Dating back to September 2021, the data also contained purchases from the online store along with customer names, phone numbers and postcodes. Dennis Kirk did not respond to multiple attempts to make contact about the breach.

  13. Altenen

    altenens.is
    1.3Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Cryptocurrency wallet addresses
    • Email addresses
    • Passwords
    • Usernames
    In June 2022, the malicious "carding" (referring to credit card fraud) website Altenen suffered a data breach that was later redistributed as part of a larger corpus of data. The data included 1.3M unique email addresses, usernames, bcrypt password hashes and cryptocurrency wallet addresses.

  14. Mohawk Valley Cardiology, P.C.

    NY, US · Healthcare Provider · Unauthorized Access/Disclosure
    5Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Other

  15. Z-lib

    z-lib.is
    9.7Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Cryptocurrency wallet addresses
    • Email addresses
    • Geographic locations
    • Passwords
    • Purchases
    • Usernames
    In June 2024, almost 10M user records from Z-lib were discovered exposed online. Now defunct, Z-lib was a malicious clone of Z-Library, a well-known shadow online platform for pirating books and academic papers. The exposed data included usernames, email addresses, countries of residence, Bitcoin and Monero cryptocurrency wallet addresses, purchases and bcrypt password hashes.

  19. TNAFlix

    tnaflix.com
    1.4Maccounts
    Breached Disclosed
    Have I Been Pwned Verified Sensitive
    • Email addresses
    • IP addresses
    • Passwords
    • Usernames
    In June 2022, the adult website TNAFlix suffered a data breach that was later redistributed as part of a larger corpus of data. The data included 1.4M records of email and IP addresses, usernames and plain text passwords.

  20. VimeWorld

    vimeworld.com
    3.1Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • IP addresses
    • Passwords
    • Usernames
    In October 2018, the Russian Minecraft service VimeWorld suffered a data breach that was later redistributed as part of a larger corpus of data. The data included 3.1M records of usernames, email and IP addresses and passwords stored as either MD5 or bcrypt hashes.

  21. StreamCraft

    streamcraft.net
    1.8Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • IP addresses
    • Passwords
    • Usernames
    In July 2020, the Russian Minecraft service StreamCraft suffered a data breach that was later redistributed as part of a larger corpus of data. The data included 1.8M records of usernames, email and IP addresses and passwords stored as either MD5 or bcrypt hashes.

  22. The Club Penguin Experience

    thecpexperience.com
    6.3Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Age groups
    • Email addresses
    • Password hints
    • Passwords
    • Usernames
    In October 2024, The Club Penguin Experience (TCPE) suffered a data breach. The incident exposed over 6k subscribers' email addresses alongside usernames, age groups, passwords stored as bcrypt hashes and in some cases, plain text password hints. TCPE sent prompt disclosure notices to impacted customers following the breach.

  23. digiDirect

    digidirect.com.au
    304.3Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Dates of birth
    • Email addresses
    • Names
    • Phone numbers
    • Physical addresses
    In September 2024, a data breach sourced from the Australian retailer digiDirect was published to a popular hacking forum. The breach exposed over 300k rows of data including email and physical address, name, phone number and date of birth. Approximately half the email addresses were on domains from external marketplaces including Amazon, eBay and Westfield.

  24. Gandara Mental Health Center

    MA, US · Healthcare Provider · Hacking/IT Incident
    20Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

Breach records: Have I Been Pwned (CC BY 4.0), the HHS OCR breach portal, the Washington State Attorney General and the California Attorney General breach registers (public records). Last synced 11 hours ago.