Data Breaches

1. April 2016
2. T

   The Fappening

   thefappening.so

   179Kaccounts

   Breached 1 Dec 2015 Disclosed 13 Apr 2016

   Have I Been Pwned Verified Sensitive

   • Email addresses
   • Passwords
   • Usernames

   In December 2015, the forum for discussing naked celebrity photos known as "The Fappening" (named after the iCloud leaks of 2014) was compromised and 179k accounts were leaked. Exposed member data included usernames, email addresses and salted hashes of passwords.
3. March 2016
4. A

   Avast

   avast.com

   423Kaccounts

   Breached 26 May 2014 Disclosed 12 Mar 2016

   Have I Been Pwned Verified

   • Email addresses
   • Passwords
   • Usernames

   In May 2014, the Avast anti-virus forum was hacked and 423k member records were exposed. The Simple Machines Based forum included usernames, emails and password hashes.
5. L

   Lord of the Rings Online

   lotro.com

   1.1Maccounts

   Breached 1 Aug 2013 Disclosed 12 Mar 2016

   Have I Been Pwned Verified

   • Dates of birth
   • Email addresses
   • IP addresses
   • Passwords
   • Usernames
   • Website activity

   In August 2013, the interactive video game Lord of the Rings Online suffered a data breach that exposed over 1.1M players' accounts. The data was being actively traded on underground forums and included email addresses, birth dates and password hashes.
6. D

   Dungeons & Dragons Online

   ddo.com

   1.6Maccounts

   Breached 2 Apr 2013 Disclosed 12 Mar 2016

   Have I Been Pwned Verified

   • Dates of birth
   • Email addresses
   • IP addresses
   • Passwords
   • Usernames
   • Website activity

   In April 2013, the interactive video game Dungeons & Dragons Online suffered a data breach that exposed almost 1.6M players' accounts. The data was being actively traded on underground forums and included email addresses, birth dates and password hashes.
7. T

   Team SoloMid

   solomid.net

   442.2Kaccounts

   Breached 22 Dec 2014 Disclosed 9 Mar 2016

   Have I Been Pwned Verified

   • Email addresses
   • IP addresses
   • Passwords
   • Usernames

   In December 2014, the electronic sports organisation known as Team SoloMid was hacked and 442k members accounts were leaked. The accounts included email and IP addresses, usernames and salted hashes of passwords.
8. M

   Malwarebytes

   malwarebytes.org

   111.6Kaccounts

   Breached 15 Nov 2014 Disclosed 9 Mar 2016

   Have I Been Pwned Verified

   • Dates of birth
   • Email addresses
   • IP addresses
   • Passwords
   • Usernames
   • Website activity

   In November 2014, the Malwarebytes forum was hacked and 111k member records were exposed. The IP.Board forum included email and IP addresses, birth dates and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.
9. M

   Minefield

   minefield.fr

   188.3Kaccounts

   Breached 28 Jun 2015 Disclosed 9 Mar 2016

   Have I Been Pwned Verified

   • Dates of birth
   • Email addresses
   • IP addresses
   • Passwords
   • Usernames
   • Website activity

   In June 2015, the French Minecraft server known as Minefield was hacked and 188k member records were exposed. The IP.Board forum included email and IP addresses, birth dates and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.
10. S

    Seedpeer

    seedpeer.eu

    281.9Kaccounts

    Breached 12 Jul 2015 Disclosed 9 Mar 2016

    Have I Been Pwned Verified

    • Email addresses
    • Passwords
    • Usernames

    In July 2015, the torrent site Seedpeer was hacked and 282k member records were exposed. The data included usernames, email addresses and passwords stored as weak MD5 hashes.
11. S

    Sumo Torrent

    sumotorrent.sx

    285.2Kaccounts

    Breached 21 Jun 2014 Disclosed 9 Mar 2016

    Have I Been Pwned Verified

    • Email addresses
    • IP addresses
    • Passwords
    • Usernames
    • Website activity

    In June 2014, the torrent site Sumo Torrent was hacked and 285k member records were exposed. The data included IP addresses, email addresses and passwords stored as weak MD5 hashes.
12. W

    WildStar

    wildstar-online.com

    738.6Kaccounts

    Breached 11 Jul 2015 Disclosed 6 Mar 2016

    Have I Been Pwned Verified

    • Dates of birth
    • Email addresses
    • IP addresses
    • Passwords
    • Usernames

    In July 2015, the IP.Board forum for the gaming website WildStar suffered a data breach that exposed over 738k forum members' accounts. The data was being actively traded on underground forums and included email addresses, birth dates and passwords.
13. A

    Acne.org

    acne.org

    432.9Kaccounts

    Breached 25 Nov 2014 Disclosed 6 Mar 2016

    Have I Been Pwned Verified

    • Dates of birth
    • Email addresses
    • IP addresses
    • Passwords
    • Usernames

    In November 2014, the acne website acne.org suffered a data breach that exposed over 430k forum members' accounts. The data was being actively traded on underground forums and included email addresses, birth dates and passwords.
14. K

    KM.RU

    km.ru

    1.5Maccounts

    Breached 29 Feb 2016 Disclosed 3 Mar 2016

    Have I Been Pwned Verified

    • Dates of birth
    • Email addresses
    • Genders
    • Geographic locations
    • Recovery email addresses
    • Security questions and answers
    • Usernames

    In February 2016, the Russian portal and email service KM.RU was the target of an attack which was consequently detailed on Reddit. Allegedly protesting "the foreign policy of Russia in regards to Ukraine", KM.RU was one of several Russian sites in the breach and impacted almost 1.5M accounts including sensitive personal information.
15. M

    MajorGeeks

    majorgeeks.com

    269.5Kaccounts

    Breached 15 Nov 2015 Disclosed 3 Mar 2016

    Have I Been Pwned Verified

    • Email addresses
    • IP addresses
    • Passwords
    • Usernames

    In November 2015, almost 270k accounts from the MajorGeeks support forum were breached. The accounts were being actively sold and traded online and included email addresses, salted password hashes and IP addresses.
16. N

    Nival

    nival.com

    1.5Maccounts

    Breached 29 Feb 2016 Disclosed 3 Mar 2016

    Have I Been Pwned Verified

    • Avatars
    • Dates of birth
    • Email addresses
    • Genders
    • Names
    • Spoken languages
    • Usernames
    • +1 more

    In February 2016, the Russian gaming company Nival was the target of an attack which was consequently detailed on Reddit. Allegedly protesting "the foreign policy of Russia in regards to Ukraine", Nival was one of several Russian sites in the breach and impacted over 1.5M accounts including sensitive personal information.
17. February 2016
18. I

    iPmart

    ipmart-forum.com

    2.5Maccounts

    Breached 1 Jul 2015 Disclosed 23 Feb 2016

    Have I Been Pwned Verified

    • Dates of birth
    • Email addresses
    • Passwords
    • Usernames

    During 2015, the iPmart forum (now known as Mobi NUKE) was hacked and over 2 million forum members' details were exposed. The vBulletin forum included IP addresses, birth dates and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked. A further 368k accounts were added to "Have I Been Pwned" in March 2016 bringing the total to over 2.4M.
19. S

    SkTorrent

    sktorrent.eu

    117.1Kaccounts

    Breached 19 Feb 2016 Disclosed 23 Feb 2016

    Have I Been Pwned Verified

    • Email addresses
    • Passwords
    • Usernames

    In February 2016, the Slovak torrent tracking site SkTorrent was hacked and over 117k records leaked online. The data dump included usernames, email addresses and passwords stored in plain text.
20. L

    Linux Mint

    linuxmint.com

    145Kaccounts

    Breached 21 Feb 2016 Disclosed 22 Feb 2016

    Have I Been Pwned Verified

    • Avatars
    • Dates of birth
    • Email addresses
    • Geographic locations
    • IP addresses
    • Passwords
    • Time zones
    • +1 more

    In February 2016, the website for the Linux distro known as Linux Mint was hacked and the ISO infected with a backdoor. The site also ran a phpBB forum which was subsequently put up for sale complete with almost 145k email addresses, passwords and other personal subscriber information.
21. R

    R2Games

    r2games.com

    22.3Maccounts

    Breached 1 Nov 2015 Disclosed 9 Feb 2016

    Have I Been Pwned Verified

    • Email addresses
    • IP addresses
    • Passwords
    • Usernames

    In late 2015, the gaming website R2Games was hacked and more than 2.1M personal records disclosed. The vBulletin forum included IP addresses and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked. A further 11M accounts were added to "Have I Been Pwned" in March 2016 and another 9M in July 2016 bringing the total to over 22M.
22. C

    Comcast

    comcast.net

    616.9Kaccounts

    Breached 8 Nov 2015 Disclosed 8 Feb 2016

    Have I Been Pwned Verified

    • Email addresses
    • Passwords
    • Physical addresses

    In November 2015, the US internet and cable TV provider Comcast suffered a data breach that exposed 590k customer email addresses and plain text passwords. A further 27k accounts appeared with home addresses with the entire data set being sold on underground forums.
23. P

    Plex

    plex.tv

    327.3Kaccounts

    Breached 2 Jul 2015 Disclosed 8 Feb 2016

    Have I Been Pwned Verified

    • Email addresses
    • IP addresses
    • Passwords
    • Usernames

    In July 2015, the discussion forum for Plex media centre was hacked and over 327k accounts exposed. The IP.Board forum included IP addresses and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.
24. X

    Xbox-Scene

    xboxscene.com

    432.6Kaccounts

    Breached 1 Feb 2015 Disclosed 7 Feb 2016

    Have I Been Pwned Verified

    • Email addresses
    • IP addresses
    • Passwords
    • Usernames

    In approximately February 2015, the Xbox forum known as Xbox-Scene was hacked and more than 432k accounts were exposed. The IP.Board forum included IP addresses and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.
25. P

    PS3Hax

    ps3hax.net

    447.4Kaccounts

    Breached 1 Jul 2015 Disclosed 7 Feb 2016

    Have I Been Pwned Verified

    • Email addresses
    • IP addresses
    • Passwords
    • Usernames

    In approximately July 2015, the Sony Playstation hacks and mods forum known as PS3Hax was hacked and more than 447k accounts were exposed. The vBulletin forum included IP addresses and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.
26. P

    PSX-Scene

    psx-scene.com

    341.1Kaccounts

    Breached 1 Feb 2015 Disclosed 7 Feb 2016

    Have I Been Pwned Verified

    • Email addresses
    • IP addresses
    • Passwords
    • Usernames

    In approximately February 2015, the Sony Playstation forum known as PSX-Scene was hacked and more than 340k accounts were exposed. The vBulletin forum included IP addresses and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.
27. O

    OwnedCore

    OwnedCore.com

    880.3Kaccounts

    Breached 1 Aug 2013 Disclosed 6 Feb 2016

    Have I Been Pwned Verified

    • Email addresses
    • IP addresses
    • Passwords
    • Usernames

    In approximately August 2013, the World of Warcraft exploits forum known as OwnedCore was hacked and more than 880k accounts were exposed. The vBulletin forum included IP addresses and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.

Breach records: Have I Been Pwned (CC BY 4.0), the HHS OCR breach portal, the Washington State Attorney General and the California Attorney General breach registers (public records). Last synced 15 hours ago.