Data Breaches

Check your email or password

Find out whether your email address or a password are leaked somewhere.

Check your email address or password…

  1. ProctorU

    proctoru.com
    444.5Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Passwords
    • Phone numbers
    • Physical addresses
    • Usernames
    In June 2020, the online exam service ProctorU suffered a data breach which was subsequently shared extensively across online hacking communities. The breach contained 444k user records including names, email and physical addresses, phones numbers and passwords stored as bcrypt hashes.

  2. Kreditplus

    kreditplus.com
    768.9Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Dates of birth
    • Email addresses
    • Employers
    • Family structure
    • Genders
    • Income levels
    • Living costs
    • +8 more
    In June 2020, the Indonesian credit service Kreditplus suffered a data breach which exposed 896k records containing 769k unique email addresses. The breach exposed extensive personal information including names, family makeup, information on spouses, income and expenses, religions and employment information.

  3. TrueFire

    truefire.com
    599.7Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Account balances
    • Dates of birth
    • Email addresses
    • Names
    • Passwords
    • Phone numbers
    • Physical addresses
    • +1 more
    In February 2020, the guitar tuition website TrueFire suffered a data breach which impacted 600k members. The breach exposed extensive personal information including names, email and physical addresses, account balances and unsalted MD5 password hashes. The data was provided to HIBP by dehashed.com.

  4. 집꾸미기

    ggumim.co.kr
    1.3Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Phone numbers
    • Usernames
    In March 2020, the Korean interior decoration website ???? (Decorating the House) suffered a data breach which impacted almost 1.3 million members. Served via the URL ggumim.co.kr, the exposed data included email addresses, names, usernames and phone numbers, all of which was subsequently shared extensively throughout online hacking communities.

  5. Vakinha

    vakinha.com.br
    4.8Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Dates of birth
    • Email addresses
    • IP addresses
    • Names
    • Passwords
    • Phone numbers
    In June 2020, the Brazilian fund raising service Vakinha suffered a data breach which impacted almost 4.8 million members. The exposed data included email addresses, names, phone numbers, geographic locations and passwords stored as bcrypt hashes, all of which was subsequently shared extensively throughout online hacking communities. The data was provided to HIBP by dehashed.com.

  6. Havenly

    havenly.com
    1.4Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Geographic locations
    • Names
    • Passwords
    • Phone numbers
    In June 2020, the interior design website Havenly suffered a data breach which impacted almost 1.4 million members of the service. The exposed data included email addresses, names, phone numbers, geographic locations and passwords stored as SHA-1 hashes, all of which was subsequently shared extensively throughout online hacking communities. The data was provided to HIBP by dehashed.com.

  7. Swvl

    swvl.com
    4.2Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Partial credit card data
    • Passwords
    • Phone numbers
    • Profile photos
    In June 2020, the Egyptian bus operator Swvl suffered a data breach which impacted over 4 million members of the service. The exposed data included names, email addresses, phone numbers, profile photos, partial credit card data (type and last 4 digits) and passwords stored as bcrypt hashes, all of which was subsequently shared extensively throughout online hacking communities.

  8. Appen

    appen.com
    5.9Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Employers
    • IP addresses
    • Names
    • Passwords
    • Phone numbers
    In June 2020, the AI training data company Appen suffered a data breach exposing the details of almost 5.9 million users which were subsequently sold online. Included in the breach were names, email addresses and passwords stored as bcrypt hashes. Some records also contained phone numbers, employers and IP addresses. The data was provided to HIBP by dehashed.com.

  9. Scentbird

    scentbird.com
    5.8Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Dates of birth
    • Email addresses
    • Genders
    • Names
    • Password strengths
    • Passwords
    In June 2020, the online fragrance service Scentbird suffered a data breach that exposed the personal information of over 5.8 million customers. Personal information including names, email addresses, genders, dates of birth, passwords stored as bcrypt hashes and indicators of password strength were all exposed.

  10. Chatbooks

    chatbooks.com
    2.5Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Passwords
    • Phone numbers
    • Social media profiles
    In March 2020, the photo print service Chatbooks suffered a data breach which was subsequently put up for sale on a dark web marketplace. The breach contained 15 million user records with 2.5 million unique email addresses alongside names, phone numbers, social media profiles and salted SHA-512 password hashes. The data was provided to HIBP by dehashed.com.

  11. Dunzo

    dunzo.com
    3.5Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Device information
    • Email addresses
    • Geographic locations
    • IP addresses
    • Names
    • Phone numbers
    In approximately June 2019, the Indian delivery service Dunzo suffered a data breach. Exposing 3.5 million unique email addresses, the Dunzo breach also included names, phone numbers and IP addresses which were all broadly distributed online via a hacking forum. The data was provided to HIBP by dehashed.com.

  12. Drizly

    drizly.com
    2.5Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Dates of birth
    • Device information
    • Email addresses
    • IP addresses
    • Names
    • Passwords
    • Phone numbers
    • +1 more
    In approximately July 2020, the US-based online alcohol delivery service Drizly suffered a data breach. The data was sold online before being extensively redistributed and contained 2.5 million unique email addresses alongside names, physical and IP addresses, phone numbers, dates of birth and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com.

  13. Hurb

    hurb.com
    20.7Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Dates of birth
    • Email addresses
    • IP addresses
    • Names
    • Passwords
    • Phone numbers
    • Social media profiles
    In approximately March 2019, the online Brazilian travel agency Hurb (formerly Hotel Urbano) suffered a data breach. The data subsequently appeared online for download the following year and included over 20 million customer records with email and IP addresses, names, dates of birth, phone numbers and passwords stored as unsalted MD5 hashes. The data was provided to HIBP by dehashed.com.

  14. Dave

    dave.com
    3Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Dates of birth
    • Email addresses
    • Names
    • Passwords
    • Phone numbers
    • Physical addresses
    • Social security numbers
    In June 2020, the digital banking app Dave suffered a data breach which exposed 7.5 million rows of data and subsequently appeared for public download on a hacking forum. The breach exposed extensive personal information including almost 3 million unique email addresses alongside names, dates of birth, encrypted social security numbers and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com.

  15. Promo

    promo.com
    14.6Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Genders
    • IP addresses
    • Names
    • Passwords
    In July 2020, the self-proclaimed "World's #1 Marketing Video Maker" Promo suffered a data breach which was then shared extensively on a hacking forum. The incident exposed 22 million records containing almost 15 million unique email addresses alongside IP addresses, genders, names and salted SHA-256 password hashes. The data was provided to HIBP by dehashed.com.

  16. Wattpad

    wattpad.com
    268.8Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Bios
    • Dates of birth
    • Email addresses
    • Genders
    • Geographic locations
    • IP addresses
    • Names
    • +4 more
    In June 2020, the user-generated stories website Wattpad suffered a huge data breach that exposed almost 270 million records. The data was initially sold then published on a public hacking forum where it was broadly shared. The incident exposed extensive personal information including names and usernames, email and IP addresses, genders, birth dates and passwords stored as bcrypt hashes.

  17. Quidd

    quidd.co
    3.8Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Passwords
    • Usernames
    In 2019, online marketplace for trading stickers, cards, toys, and other collectibles Quidd suffered a data breach. The breach exposed almost 4 million users' email addresses, usernames and passwords stored as bcrypt hashes. The data was subsequently sold then redistributed extensively via hacking forums.

  18. Foodora

    foodora.com
    582.6Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Passwords
    • Phone numbers
    • Physical addresses
    In April 2016, the online food delivery service Foodora suffered a data breach which was then extensively redistributed online. The breach included the personal information of hundreds of thousands of customers from multiple countries including their names, delivery addresses, phone numbers and passwords stored as either a salted MD5 or a bcrypt hash.

  19. Mathway

    mathway.com
    25.7Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Device information
    • Email addresses
    • Names
    • Passwords
    • Social media profiles
    In January 2020, the math solving website Mathway suffered a data breach that exposed over 25M records. The data was subsequently sold on a dark web marketplace and included names, Google and Facebook IDs, email addresses and salted password hashes.

  21. Lead Hunter

    68.7Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Genders
    • IP addresses
    • Names
    • Phone numbers
    • Physical addresses
    In March 2020, a massive trove of personal information referred to as "Lead Hunter" was provided to HIBP after being found left exposed on a publicly facing Elasticsearch server. The data contained 69 million unique email addresses across 110 million rows of data accompanied by additional personal information including names, phone numbers, genders and physical addresses. At the time of publishing, the breach could not be attributed to those responsible for obtaining and exposing it. The data was provided to HIBP by dehashed.com.

  22. Wishbone (2020)

    wishbone.io
    9.7Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Auth tokens
    • Dates of birth
    • Email addresses
    • Genders
    • Geographic locations
    • IP addresses
    • Names
    • +5 more
    In January 2020, the mobile app to "compare anything" Wishbone suffered another data breach which followed their breach from 2016. An extensive amount of personal information including almost 10M unique email addresses alongside names, phone numbers geographic locations and other personal attributes were leaked online and extensively redistributed. Passwords stored as unsalted MD5 hashes were also included in the breach.

  23. LiveJournal

    livejournal.com
    26.4Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Passwords
    • Usernames
    In mid-2019, news broke of an alleged LiveJournal data breach. This followed multiple reports of credential abuse against Dreamwidth beginning in 2018, a fork of LiveJournal with a significant crossover in user base. The breach allegedly dates back to 2017 and contains 26M unique usernames and email addresses (both of which have been confirmed to exist on LiveJournal) alongside plain text passwords. An archive of the data was subsequently shared on a popular hacking forum in May 2020 and redistributed broadly.

Breach records: Have I Been Pwned (CC BY 4.0), the HHS OCR breach portal, the Washington State Attorney General and the California Attorney General breach registers (public records). Last synced 56 min ago.