Data Breaches

1. February 2016
2. G

   Gamerzplanet

   gamerzplanet.net

   1.2Maccounts

   Breached 23 Oct 2015 Disclosed 5 Feb 2016

   Have I Been Pwned Verified

   • Email addresses
   • IP addresses
   • Passwords
   • Usernames

   In approximately October 2015, the online gaming forum known as Gamerzplanet was hacked and more than 1.2M accounts were exposed. The vBulletin forum included IP addresses and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.
3. January 2016
4. H

   Heroes of Newerth

   heroesofnewerth.com

   8.1Maccounts

   Breached 17 Dec 2012 Disclosed 24 Jan 2016

   Have I Been Pwned Verified

   • Email addresses
   • Passwords
   • Usernames

   In December 2012, the multiplayer online battle arena game known as Heroes of Newerth was hacked and over 8 million accounts extracted from the system. The compromised data included usernames, email addresses and passwords.
5. V

   vBulletin

   vbulletin.com

   519Kaccounts

   Breached 3 Nov 2015 Disclosed 24 Jan 2016

   Have I Been Pwned Verified

   • Dates of birth
   • Email addresses
   • Homepage URLs
   • Instant messenger identities
   • IP addresses
   • Passwords
   • Security questions and answers
   • +2 more

   In November 2015, the forum software maker vBulletin suffered a serious data breach. The attack lead to the release of both forum user and customer accounts totalling almost 519k records. The breach included email addresses, birth dates, security questions and answers for customers and salted hashes of passwords for both sources.
6. G

   Gamigo

   gamigo.com

   8.2Maccounts

   Breached 1 Mar 2012 Disclosed 18 Jan 2016

   Have I Been Pwned Verified

   • Email addresses
   • Passwords

   In March 2012, the German online game publisher Gamigo was hacked and more than 8 million accounts publicly leaked. The breach included email addresses and passwords stored as weak MD5 hashes with no salt.
7. N

   Nexus Mods

   nexusmods.com

   5.9Maccounts

   Breached 22 Jul 2013 Disclosed 17 Jan 2016

   Have I Been Pwned Verified

   • Email addresses
   • Passwords
   • Usernames

   In December 2015, the game modding site Nexus Mods released a statement notifying users that they had been hacked. They subsequently dated the hack as having occurred in July 2013 although there is evidence to suggest the data was being traded months in advance of that. The breach contained usernames, email addresses and passwords stored as a salted hashes.
8. December 2015
9. A

   Android Forums

   androidforums.com

   745.4Kaccounts

   Breached 30 Oct 2011 Disclosed 20 Dec 2015

   Have I Been Pwned Verified

   • Dates of birth
   • Email addresses
   • Homepage URLs
   • Instant messenger identities
   • IP addresses
   • Passwords

   In October 2011, the Android Forums website was hacked and 745k user accounts were subsequently leaked publicly. The compromised data included email addresses, user birth dates and passwords stored as a salted MD5 hash.
10. November 2015
11. N

    Neteller

    neteller.com

    3.6Maccounts

    Breached 17 May 2010 Disclosed 30 Nov 2015

    Have I Been Pwned Verified

    • Account balances
    • Dates of birth
    • Email addresses
    • Genders
    • IP addresses
    • Names
    • Phone numbers
    • +3 more

    In May 2010, the e-wallet service known as Neteller suffered a data breach which exposed over 3.6M customers. The breach was not discovered until October 2015 and included names, email addresses, home addresses and account balances.
12. M

    Money Bookers

    moneybookers.com

    4.5Maccounts

    Breached 1 Jan 2009 Disclosed 30 Nov 2015

    Have I Been Pwned Verified

    • Dates of birth
    • Email addresses
    • IP addresses
    • Names
    • Phone numbers
    • Physical addresses

    Sometime in 2009, the e-wallet service known as Money Bookers suffered a data breach which exposed almost 4.5M customers. Now called Skrill, the breach was not discovered until October 2015 and included names, email addresses, home addresses and IP addresses.
13. F

    Foxy Bingo

    foxybingo.com

    252.2Kaccounts

    Breached 4 Apr 2008 Disclosed 22 Nov 2015

    Have I Been Pwned Verified

    • Account balances
    • Browser user agent details
    • Dates of birth
    • Email addresses
    • Genders
    • Names
    • Passwords
    • +4 more

    In April 2007, the online gambling site Foxy Bingo was hacked and 252,000 accounts were obtained by the hackers. The breached records were subsequently sold and traded and included personal information data such as plain text passwords, birth dates and home addresses.
14. B

    Black Hat World

    blackhatworld.com

    777.4Kaccounts

    Breached 23 Jun 2014 Disclosed 3 Nov 2015

    Have I Been Pwned Verified

    • Dates of birth
    • Email addresses
    • Instant messenger identities
    • IP addresses
    • Passwords
    • Usernames
    • Website activity

    In June 2014, the search engine optimisation forum Black Hat World had three quarters of a million accounts breached from their system. The breach included various personally identifiable attributes which were publicly released in a MySQL database script.
15. M

    Mac-Torrents

    mac-torrents.com

    94Kaccounts

    Breached 31 Oct 2015 Disclosed 1 Nov 2015

    Have I Been Pwned Verified

    • Email addresses
    • Passwords
    • Usernames

    In October 2015, the torrent site Mac-Torrents was hacked and almost 94k usernames, email addresses and passwords were leaked. The passwords were hashed with MD5 and no salt.
16. October 2015
17. F

    Final Fantasy Shrine

    ffshrine.org

    620.7Kaccounts

    Breached 18 Sep 2015 Disclosed 31 Oct 2015

    Have I Been Pwned Verified

    • Email addresses
    • Passwords
    • Usernames
    • Website activity

    In September 2015, the Final Fantasy discussion forum known as FFShrine was breached and the data dumped publicly. Approximately 620k records were released containing email addresses, IP addresses and salted hashes of passwords.
18. P

    PHP Freaks

    phpfreaks.com

    173.9Kaccounts

    Breached 27 Oct 2015 Disclosed 30 Oct 2015

    Have I Been Pwned Verified

    • Dates of birth
    • Email addresses
    • IP addresses
    • Passwords
    • Usernames
    • Website activity

    In October 2015, the PHP discussion board PHP Freaks was hacked and 173k user accounts were publicly leaked. The breach included multiple personal data attributes as well as salted and hashed passwords.
19. 0

    000webhost

    000webhost.com

    14.9Maccounts

    Breached 1 Mar 2015 Disclosed 27 Oct 2015

    Have I Been Pwned Verified

    • Email addresses
    • IP addresses
    • Names
    • Passwords

    In approximately March 2015, the free web hosting provider 000webhost suffered a major data breach that exposed almost 15 million customer records. The data was sold and traded before 000webhost was alerted in October. The breach included names, email addresses and plain text passwords.
20. M

    MPGH

    mpgh.net

    3.1Maccounts

    Breached 22 Oct 2015 Disclosed 26 Oct 2015

    Have I Been Pwned Verified

    • Email addresses
    • IP addresses
    • Passwords
    • Usernames

    In October 2015, the multiplayer game hacking website MPGH was hacked and 3.1 million user accounts disclosed. The vBulletin forum breach contained usernames, email addresses, IP addresses and salted hashes of passwords.
21. P

    Paddy Power

    paddypower.com

    591Kaccounts

    Breached 25 Oct 2010 Disclosed 11 Oct 2015

    Have I Been Pwned Verified

    • Account balances
    • Dates of birth
    • Email addresses
    • IP addresses
    • Names
    • Phone numbers
    • Physical addresses
    • +3 more

    In October 2010, the Irish bookmaker Paddy Power suffered a data breach that exposed 750,000 customer records with nearly 600,000 unique email addresses. The breach was not disclosed until July 2014 and contained extensive personal information including names, addresses, phone numbers and plain text security questions and answers.
22. M

    MyVidster (2015)

    myvidster.com

    19.9Kaccounts

    Breached 15 Aug 2015 Disclosed 10 Oct 2015

    Have I Been Pwned Verified

    • Email addresses
    • Passwords
    • Usernames

    In August 2015, the social video sharing and bookmarking site MyVidster was hacked and nearly 20,000 accounts were dumped online. The dump included usernames, email addresses and hashed passwords.
23. P

    Patreon

    patreon.com

    2.3Maccounts

    Breached 1 Oct 2015 Disclosed 2 Oct 2015

    Have I Been Pwned Verified

    • Email addresses
    • Passwords
    • Payment histories
    • Physical addresses
    • Private messages
    • Website activity

    In October 2015, the crowdfunding site Patreon was hacked and over 16GB of data was released publicly. The dump included almost 14GB of database records with more than 2.3M unique email addresses, millions of personal messages and passwords stored as bcrypt hashes.
24. August 2015
25. A

    Ashley Madison

    ashleymadison.com

    30.8Maccounts

    Breached 19 Jul 2015 Disclosed 18 Aug 2015

    Have I Been Pwned Verified Sensitive

    • Dates of birth
    • Email addresses
    • Ethnicities
    • Genders
    • Names
    • Passwords
    • Payment histories
    • +6 more

    In July 2015, the infidelity website Ashley Madison suffered a serious data breach. The attackers threatened Ashley Madison with the full disclosure of the breach unless the service was shut down. One month later, the database was dumped including more than 30M unique email addresses. This breach has been classed as "sensitive" and is not publicly searchable, although individuals may discover if they've been impacted by registering for notifications. Read about this approach in detail.
26. X

    XSplit

    xsplit.com

    3Maccounts

    Breached 7 Nov 2013 Disclosed 8 Aug 2015

    Have I Been Pwned Verified

    • Email addresses
    • Names
    • Passwords
    • Usernames

    In November 2013, the makers of gaming live streaming and recording software XSplit was compromised in an online attack. The data breach leaked almost 3M names, email addresses, usernames and hashed passwords.
27. July 2015
28. Y

    YouPorn

    youporn.com

    1.3Maccounts

    Breached 21 Feb 2012 Disclosed 30 Jul 2015

    Have I Been Pwned Verified Sensitive

    • Email addresses
    • Passwords

    In February 2012, the adult website YouPorn had over 1.3M user accounts exposed in a data breach. The publicly released data included both email addresses and plain text passwords.
29. H

    Hacking Team

    hackingteam.com

    32.3Kaccounts

    Breached 6 Jul 2015 Disclosed 13 Jul 2015

    Have I Been Pwned Verified

    • Email addresses
    • Email messages

    In July 2015, the Italian security firm Hacking Team suffered a major data breach that resulted in over 400GB of their data being posted online via a torrent. The data searchable on "Have I Been Pwned?" is from 189GB worth of PST mail folders in the dump. The contents of the PST files is searchable on Wikileaks.
30. H

    Hemmakväll

    hemmakvall.se

    47.3Kaccounts

    Breached 8 Jul 2015 Disclosed 9 Jul 2015

    Have I Been Pwned Verified

    • Email addresses
    • Names
    • Passwords
    • Phone numbers
    • Physical addresses

    In July 2015, the Swedish video store chain Hemmakväll was hacked and nearly 50k records dumped publicly. The disclosed data included various attributes of their customers including email and physical addresses, names and phone numbers. Passwords were also leaked, stored with a weak MD5 hashing algorithm.
31. M

    myRepoSpace

    myrepospace.com

    252.8Kaccounts

    Breached 6 Jul 2015 Disclosed 8 Jul 2015

    Have I Been Pwned Verified

    • Email addresses
    • IP addresses
    • Passwords
    • Usernames

    In July 2015, the Cydia repository known as myRepoSpace was hacked and user data leaked publicly. Cydia is designed to facilitate the installation of apps on jailbroken iOS devices. The repository service was allegedly hacked by @its_not_herpes and 0x8badfl00d in retaliation for the service refusing to remove pirated tweaks.

Breach records: Have I Been Pwned (CC BY 4.0), the HHS OCR breach portal, the Washington State Attorney General and the California Attorney General breach registers (public records). Last synced 14 hours ago.