Medela.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers, Job titles
Medela, a Swiss medical device company, was allegedly breached by the ShinyHunters group in September 2026, with data later published online exposing 424k unique email addresses along with names, physical addresses, phone numbers, and support ticket information relating predominantly to healthcare professionals, staff, and leads.
Manchesterairport.co.uk
No information available about the affected data.
Cyberattack against Manchester Airports Group (MAG), operator of Manchester Airport, London Stansted, and East Midlands Airport. Attackers exfiltrated and then published data concerning up to 8.7 million people. The data includes email addresses, phone numbers, license plate numbers, and postal codes. Banking and payment information was not compromised.
Berlin.de
No information available about the affected data.
Cyberattack against the Berlin administration's computer network. Attackers copied and published around 1.44 million files totaling 5.8 TB of data. Personal data of employees and potentially citizens was published. The number of affected people has not yet been determined.
Trezor.io
No information available about the affected data.
Compromise of the logistics provider ShipMonk used by Trezor. Data for 11,742 customers was fully exposed and data for 1,947 partially exposed, totaling 13,689 customers. The data includes names, emails, phone numbers, and delivery addresses.
Ryde-technology.com
No information available about the affected data.
Unauthorized access to Ryde accounts. Approximately 4.5 million accounts are affected in total, including around 1.6 million in Norway. The data includes dates of birth, contact details, payment history, and some banking card information. The data was then offered for sale on a criminal forum.
Mckesson.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth, Genders
McKesson, a healthcare and pharmaceutical company, was targeted by the ShinyHunters group in August 2026, with data later published online exposing 6.8M unique email addresses along with other personal and corporate information relating to patients, staff, healthcare provider contacts, and marketing recipients.
Chess.com
Types of Data Affected: Email addresses, Names, Usernames, Geographic locations
Chess.com, an online chess platform, had user data scraped and published online in August 2026, exposing 7.3M records including 4.6M unique email addresses along with usernames, names, countries, and other account information.
Fanlore.org
Types of Data Affected: Email addresses, Names, Passwords, Usernames
Fanlore, a fan culture wiki operated by the Organization for Transformative Works, was compromised in August 2026, exposing 145k unique email addresses along with usernames and passwords stored as MD5 or PBKDF2 hashes.
Baxter.com
Types of Data Affected: Email addresses, Names, Geographic locations, Physical addresses, Nationality,
Baxter International, a healthcare and medical products company, was compromised in August 2026, exposing 489k unique email addresses along with names, geographic locations, physical addresses, and nationalities from more than 7.1M Salesforce records.
Magairports.com
Types of Data Affected: Email addresses, Names, Phone numbers, IP addresses, Vehicle registration numbers, Geographic locations, Browser user agents
Manchester Airports Group (MAG), an airport operator, was compromised in August 2026, with data later published by the FulcrumSec group exposing email addresses and phone numbers relating to 8.4M customers along with vehicle registrations, parking history, Fast Track purchases, and lounge bookings.
Sharecare.com
Types of Data Affected: Email addresses, Names, Phone numbers, Titles, Geographic locations, Physical addresses,
Sharecare, a digital health company, was compromised in August 2026, exposing 326k unique email addresses along with names, phone numbers, titles, geographic locations, physical addresses, and internal corporate data from more than 3.4M Salesforce records.
Lumenis.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers, Geographic locations, Dates of birth,
Lumenis, a medical device company, was compromised in August 2026, exposing 384k unique email addresses along with names, physical addresses, phone numbers, geographic locations, dates of birth, and internal corporate data from more than 1.1M records.
Carhartt.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth,
Carhartt, a clothing retailer, was allegedly breached by the ShinyHunters group in August 2026, with data later published online exposing 24.9M unique email addresses along with names, phone numbers, and physical addresses.
Questel.com
Types of Data Affected: Email addresses, Physical addresses, Dates of birth, Phone numbers,
Questel, an intellectual property and innovation management company, was compromised in August 2026, exposing 1.7M unique email addresses along with physical addresses, dates of birth, phone numbers, and internal corporate data from more than 21M Salesforce records.
Ozhairandbeauty.com
Types of Data Affected: Email addresses, Names, Phone numbers, Geographic locations
Oz Hair and Beauty, an online beauty retailer, was breached in August 2026, exposing 2M unique email addresses along with names, phone numbers, and geographic location data.
Alcon.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers
Alcon, an eye care company, was allegedly breached by the ShinyHunters group in August 2026, with data later published online exposing 218k unique email addresses along with names, phone numbers, physical addresses, and other corporate contact information.
Originenergy.com.au
No information available about the affected data.
Origin Energy confirmed that approximately 900,000 current and former customers were affected. Compromised data may include names, addresses, dates of birth, phone numbers, account information, and partial financial data.
Brinkshome.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth
Brinks Home, a home security company, was targeted by the ShinyHunters group in July 2026, with data later published online exposing 877k unique email addresses along with names, phone numbers, physical addresses, purchase information, and partial payment card data relating to leads, customers, and staff.
Ringcentral.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses
RingCentral, a cloud-based business communications platform, was targeted by the ShinyHunters group in July 2026, with data later published online exposing 3.1M unique email addresses along with names, physical addresses, and phone numbers belonging to a subset of customers.
Exactsciences.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses
Exact Sciences, a molecular diagnostics company, was allegedly breached in July 2026, exposing 11.3M unique email addresses along with names, phone numbers, and physical addresses.
Fluke.com
Types of Data Affected: Email addresses, Names, Physical addresses, Employers, Job titles
Fluke, an electronic test and measurement equipment manufacturer, was allegedly breached by the ShinyHunters group in June 2026, with data later published online exposing more than 800k unique email addresses along with names, phone numbers, physical addresses, and support case information.
Kddi.com
No information available about the affected data.
KDDI confirmed an intrusion into a messaging system also used by several Japanese access providers. Attackers were able to access email addresses and passwords. Up to 12 million customers may be affected.
Icsecurity.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Job titles
Inter-Con Security, a security services company, was targeted by the ShinyHunters group in June 2026, with data later published online exposing 276k unique email addresses along with names, physical addresses, job titles, and phone numbers relating to contacts, internal users, and leads.
Hccs.edu
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Genders, Dates of birth, Academic records
Houston City College, a public community college, was allegedly breached by the ShinyHunters group in June 2026, with data later published online exposing 935k unique email addresses along with names, addresses, phone numbers, academic records, and other personal information relating to students
Glendale.edu
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers, Genders, Government issued IDs
Glendale Community College, a public community college, was allegedly breached by the ShinyHunters group in June 2026, with data later published online exposing almost 1.4M unique email addresses along with names, addresses, phone numbers, Social Security numbers, and student enrolment information.
Icc.edu
Types of Data Affected: Email addresses, Names, Usernames, Phone numbers, Dates of birth,
Illinois Central College, a community college, was allegedly breached by the ShinyHunters group in June 2026, exposing 220k unique email addresses along with names, usernames, phone numbers, and dates of birth.
Sysco.com
Types of Data Affected: Email addresses, Names, Usernames, Phone numbers, Physical addresses
Sysco, a food distribution company, was targeted by ShinyHunters in June 2026, with data later published online exposing 2.7M unique email addresses along with names, phone numbers, physical addresses, internal job titles, and other corporate contact information belonging to staff and customers.
Moody.edu
Types of Data Affected: Email addresses, Names, Dates of birth, Physical addresses, Genders,
Moody Bible Institute, a Christian higher education institution, was allegedly breached in June 2026 by ShinyHunters, exposing 2.35M unique email addresses along with names, dates of birth, physical addresses, and genders.
Ralphlauren.com
Types of Data Affected: Email addresses, Names, Phone numbers, Genders
Ralph Lauren, a fashion retailer, was targeted by attackers in June 2026, with data later published online exposing 142k unique email addresses along with names, phone numbers, genders, and other information allegedly obtained from its Salesforce environment.
Americantower.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses,
American Tower, a telecommunications infrastructure company, was allegedly breached in June 2026, exposing 152k unique email addresses along with names, phone numbers, and physical addresses.
Msgsports.com
Types of Data Affected: Email addresses, Names, Usernames, Phone numbers,
Madison Square Garden Sports Corp., a professional sports and entertainment company, was allegedly breached in June 2026, exposing 9.8M unique email addresses along with customer personally identifiable information and internal corporate data from a dataset reportedly containing more than 26M records.
Jcpenney.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Genders, Dates of birth, Ethnicities
JCPenney, a retail department store chain, was allegedly breached in June 2026 as part of the ShinyHunters "pay or leak" campaign, exposing 879k unique email addresses along with names, phone numbers, physical addresses, genders, dates of birth, and ethnicities.
Nottingham.ac.uk
Types of Data Affected: Email addresses, Names, Usernames, Phone numbers, Physical addresses, Genders, IP addresses, Ethnicities
University of Nottingham, a public research university, was targeted in a cyber attack in June 2026, exposing 434k unique email addresses along with names, addresses, phone numbers, ethnicities, disabilities, passport numbers, academic enrolment information, and fee payment records affecting current students and alumni.
Dentaquest.com
Types of Data Affected: Email addresses, Names, Phone numbers, Genders, Dates of birth, Physical addresses, Government issued IDs
DentaQuest, a dental benefits administrator, was targeted by the ShinyHunters group in May 2026, with data later published exposing 2.6M unique email addresses along with names, phone numbers, physical addresses, and healthcare enrollment records
Bcdtravel.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Support tickets, Job titles
BCD Travel, a corporate travel management company, was allegedly breached in May 2026, with data later published online exposing 590k unique email addresses along with names, addresses, phone numbers, job titles, employer names, support ticket data, and records relating to leads and internal staff.
Bakerdist.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers
Baker Distributing Company, an HVAC/R wholesale distributor, was allegedly breached in May 2026, with data later published online exposing 116k unique email addresses along with names, physical addresses, phone numbers, and support ticket information relating to its HVAC contractor customer base.
Atlasmenu.net
Types of Data Affected: Email addresses, Passwords, Usernames, IP addresses, Support tickets
Atlas Menu, a GTA V and CS2 cheat service, was breached in May 2026 when an attacker allegedly gained access to all company systems and published the database online, exposing 64k unique email addresses along with usernames, IP addresses, support tickets, and bcrypt password hashes.
Cushmanwakefield.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers
Cushman & Wakefield, a real estate services firm, was targeted by the ShinyHunters group in May 2026, with data later published exposing corporate contact records including email addresses, names, job titles, company addresses, and phone numbers.
Corporate.charter.com
Types of Data Affected: Email addresses, Phone numbers, Usernames, Physical addresses, Purchases, Dates of birth, Geographic locations
Charter Communications, a telecommunications company, was allegedly targeted by the ShinyHunters group in May 2026, exposing customer data including email addresses, phone numbers, usernames, physical addresses, purchase records, dates of birth, and geographic locations.
Medtronic.com
No information available about the affected data.
Intrusion into Medtronic's corporate systems. The company confirmed the compromise and exfiltration of data. Medical and production systems were not affected.
Basic-fit.com
No information available about the affected data.
Intrusion into Basic-Fit's systems. The data of active members was downloaded by the attacker. Around one million European members are affected, including in the Netherlands, Spain, Germany, Belgium, Luxembourg, and France. The data includes names, dates of birth, contact details, and banking information.
Legionproxy.io
Types of Data Affected: Email addresses, Names, Passwords
LegionProxy, a residential and ISP proxy network, was breached in April 2026, exposing 10k email addresses along with names, purchase information, and bcrypt password hashes.
7-eleven.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses
7-Eleven, a convenience store chain, was targeted by the ShinyHunters group in April 2026, with data later published exposing 185k unique email addresses along with names, physical addresses, dates of birth, and phone numbers.
Mytheresa.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Partial credit card data, Purchases
Mytheresa, a luxury fashion e-commerce platform, was targeted by the ShinyHunters group in April 2026, with data later released publicly exposing 84k unique email addresses along with names, phone numbers, physical addresses, purchase records, and partial payment card details including card type, last four digits, and expiry date.
Kemper.com
Types of Data Affected: Email addresses, Geographic locations, Names, Phone numbers, Purchases
Kemper Corporation, an American insurance holding company, was targeted by the ShinyHunters group in April 2026, with data later published exposing 255K unique email addresses along with names, phone numbers, and physical addresses.
Zara.com
Types of Data Affected: Email addresses, Geographic locations
Zara, a fashion retailer, was targeted by the ShinyHunters group in April 2026 following an alleged compromise linked to the Anodot analytics platform, with data later published exposing 197k unique email addresses alongside support ticket records, product SKUs, order IDs, and market information.
Abrigo.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers
Abrigo, a fintech software company, was targeted by the ShinyHunters group in April 2026, with data allegedly taken from its Salesforce instance later published publicly exposing over 779k unique email addresses along with employee and business contact information including names, institution names, and phone numbers.
Canadalife.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers
Canada Life, an insurance and financial services company, was targeted by the ShinyHunters group in April 2026, with data later published exposing over 238k unique email addresses along with names, phone numbers, physical addresses, and some customer support tickets.
Vimeo.com
Types of Data Affected: Email addresses, Names
Vimeo, a video hosting platform, was listed by the ShinyHunters group in April 2026 following a breach linked to third-party analytics vendor Anodot, with data later leaked publicly exposing 119k unique email addresses along with video titles, technical data, and metadata.
Marcusmillichap.com
Types of Data Affected: Email addresses, Names, Phone numbers, Usernames, Physical addresses
Marcus & Millichap, a real estate brokerage and advisory firm, was allegedly breached by the ShinyHunters group, exposing 1.8M email addresses along with personal information.
Aman.com
Types of Data Affected: Email addresses, Names, Nationalities, Phone numbers, Physical addresses, Spouses names
Aman, an ultra-luxury hotel brand, was allegedly targeted by the ShinyHunters group in April 2026 with data later leaked publicly, exposing over 262k unique email addresses along with some names, phone numbers, physical addresses, nationalities, dates of birth, and spouse names,.
Pitneybowes.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers
Pitney Bowes, a shipping and mailing services company, was allegedly breached in April 2026 by the ShinyHunters group, with data later released publicly exposing 8.3M unique email addresses along with names, phone numbers, and physical addresses.
Adt.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Partial government issued IDs
ADT, a home security company, confirmed a breach in April 2026 by the ShinyHunters group, exposing 5.5M unique email addresses along with names, phone numbers, physical addresses, and in some cases dates of birth and the last four digits of Social Security or Tax ID numbers.
Udemy.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Employers, Job titles
Udemy, an online training platform, suffered a breach in April 2026 in an extortion attempt by the ShinyHunters group, with data later leaked publicly exposing 1.4M unique email addresses along with names, physical addresses, phone numbers, employer information, and instructor payout methods.
Carnivalcorp.com
Types of Data Affected: Email addresses, Names, Genders, Dates of birth, Geographic locations
Carnival Corporation, a cruise operator, was allegedly breached by the ShinyHunters group in April 2026, with data later published exposing 8.7M records containing 7.5M unique email addresses, along with names, dates of birth, genders, and loyalty program details related to the Holland America Mariner Society.
Mheducation.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers
McGraw Hill, an education company, confirmed a breach in April 2026 following an extortion attempt, with over 100GB of data later publicly distributed exposing 14.4M unique email addresses along with some names, physical addresses, and phone numbers.
Amtrak.com
Types of Data Affected: Email addresses, Names, Physical addresses
Amtrak, a passenger rail service, was allegedly breached by the ShinyHunters hacking group in April 2026, exposing over 2M unique email addresses along with names, physical addresses, and customer support records.
Mylovely.ai
Types of Data Affected: Email addresses, Social media profiles
My Lovely AI, an NSFW AI companion platform, was compromised in April 2026, exposing over 106k users and leaking user-created prompts, and links to generated images.
Songtrivia2.io
Types of Data Affected: Email addresses, Names, Usernames, Passwords, Auth tokens
SongTrivia2, a music trivia platform, was compromised in April 2026 with the data later published on a public hacking forum, exposing 291k unique email addresses from Google OAuth and site accounts, along with names, usernames, and bcrypt password hashes for non-OAuth users.
Assuranceamerica.com
No information available about the affected data.
Phishing attack followed by unauthorized access to personal data of customers and drivers. Approximately 7 million people affected.
Trizetto.com
No information available about the affected data.
Theft of patient personal and medical data, including names, dates of birth, SSNs, insurance information, and medical data.
Paidwork.com
Types of Data Affected: Email addresses, Names, Passwords, Dates of birth, Device information, Genders, IP addresses, Phone numbers, Physical addresses
Paidwork, a gig economy platform, was allegedly breached in March 2026, with data later published online exposing more than 23M unique email addresses along with user profile data, banking information, payout history, and bcrypt password hashes.
Woflow.com
Types of Data Affected: Email addresses, Names, Usernames, Phone numbers, Physical addresses
Woflow, an AI-driven merchant data platform, was allegedly breached by the ShinyHunters group in March 2026, with attackers claiming to have stolen hundreds of millions of records and later publishing large volumes of data containing email addresses, names, phone numbers, physical addresses, transaction data, and internal corporate information.
Berkadia.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Employers
Berkadia, a commercial real estate finance company, was targeted by attackers in March 2026, with data later published online exposing more than 300k unique email addresses along with names, physical addresses, phone numbers, and other data allegedly obtained from its Salesforce environment.
Zenbusiness.com
Types of Data Affected: Email addresses, Names, Usernames, Phone numbers, Physical addresses
ZenBusiness, a business formation and compliance platform, was allegedly breached by the ShinyHunters group in March 2026, with multiple terabytes of data later released publicly exposing approximately 12M unique email addresses along with names, phone numbers, support records, lead data, and other CRM-related information.
Ameriprise.com
Types of Data Affected: Email addresses, Financial transactions, Job titles, Phone numbers, Names, Physical addresses
Ameriprise Financial, a financial services firm, was targeted by the ShinyHunters group in March 2026, with data later published exposing 500k unique email addresses along with names, phone numbers, physical addresses, and employer information.
Addi.com
Types of Data Affected: Email addresses, Names, Government issued IDs, IP addresses, Phone numbers, Physical addresses, Purchases
Addi, a Colombian fintech company, identified unauthorized activity in March 2026 with the ShinyHunters group, later publishing a large dataset allegedly obtained from the company, exposing 25M unique email addresses along with government ID numbers, purchases, and other credit-related information.
Baydoner.com
Types of Data Affected: Email addresses, Genders, Dates of birth, Names, Passwords
Baydöner, a Turkish restaurant chain, was compromised in March 2026 with data later published on a public hacking forum, exposing over 1.2M unique email addresses along with names, phone numbers, cities of residence, plaintext passwords, and in some cases national ID numbers and dates of birth.
Hallmark.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses
Hallmark, a greeting card and media company, experienced an alleged breach and extortion incident in March 2026 involving data stored in Salesforce, with the data later published exposing 1.8M unique email addresses across Hallmark and Hallmark+ accounts, along with names, phone numbers, and physical addresses.
HumanizerPro.AI
Types of Data Affected: Email addresses, Names,
HumanizerPro.AI, an AI text rewriting tool, exposed data in March 2026 via a publicly accessible source, affecting over 65k users and leaking email addresses along with full input histories, user-submitted prompts, and rewritten texts.
TLDR.Tech
Types of Data Affected: Email addresses, Names, Usernames, Geographic locations, Social media profiles
TLDR.tech, a tech newsletter platform, had data exposed via an Apollo enrichment API endpoint in March 2026, leaking over 1.2M user records including email addresses, names, usernames, geographic locations, and linked social media profiles.
Cuties.ai
Types of Data Affected: Email addresses, Names
Cuties AI, an NSFW AI companion platform, was compromised in March 2026 with the data later published on a public hacking forum, exposing 153k unique email addresses along with display names, avatars, prompts and descriptions used to generate images, and URLs to the generated content.
Cfgi.com
Types of Data Affected: Email addresses, Phone numbers, Names, Physical addresses, Usernames, Geographic locations,
CFGI, a consulting and advisory firm, disclosed a data breach in March 2026 that exposed over 800k records, including more than 40k financial documents and internal corporate data. Of these, 250k were unique email addresses. The compromised data included names, phone numbers, physical addresses, usernames, and geographic locations.
Infinitecampus.com
Types of Data Affected: Email addresses, Phone numbers, Names, Physical addresses, Usernames, Dates of birth, Genders, Geographic locations, Passwords
Infinite Campus, an education technology platform, disclosed a data breach in March 2026 that exposed 137K records. The compromised data included email addresses, phone numbers, names, physical addresses, usernames, dates of birth, genders, geographic locations, and passwords.
Success.com
Types of Data Affected: Email addresses, Names, Phone numbers, Passwords, Device information, IP addresses, Physical addresses
Success, a personal development media brand, suffered a breach in March 2026 that exposed 142K unique email addresses along with names, IP addresses, phone numbers, and for some staff, bcrypt password hashes; the data also included order records with physical addresses and payment methods, and the system was abused to send offensive newsletters.
Breachforums.bf
Types of Data Affected: Email addresses, Usernames, Passwords
BreachForums Version 5, a hacking forum, was publicly exposed in March 2026, leaking 340k unique email addresses along with usernames and Argon2 password hashes.
Aura.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, IP addresses
Aura, an online safety service, disclosed a breach in March 2026 that exposed 900k unique email addresses, with data primarily linked to a marketing tool from an acquired company; the incident included names, phone numbers, and physical and IP addresses.
Calai.app
Types of Data Affected: Email addresses, Genders, Dates of birth, Usernames, Social media profiles
Cal AI, an AI-powered calorie tracking app, was breached in March 2026, exposing over 3M user records including more than 2.8M unique email addresses, names, dates of birth, genders, usernames, and linked social media profiles.
Merceradvisors.com
Types of Data Affected: Email addresses, Phone numbers, Names, Physical addresses, Dates of birth
Mercer Advisors, a financial advisory firm, was allegedly breached by the ShinyHunters group in February 2026, exposing 321k unique email addresses along with names, phone numbers, physical addresses, and dates of birth.
Komiko.app
Types of Data Affected: Email addresses, Names, AI prompts
KomikoAI, an AI-powered comic generation platform, was compromised in February 2026, exposing over 1M unique email addresses along with names, user posts, and AI prompts that could be mapped to individual accounts.
Pares.ai
Types of Data Affected: Email addresses, Names, Phone numbers
Pares.AI, an AI-powered real estate platform, had its database exposed in February 2026, leaking over 95k user records including names, email addresses, phone numbers, company and position details, locations, and associated real estate contact data.
Odido.nl
Types of Data Affected: Email addresses, Names, Phone numbers, Dates of birth, Bank account numbers, Physical addresses, Passport numbers
Odido, a Dutch telecommunications provider, experienced a breach and extortion attempt in February 2026, with initial leaks exposing 893k unique email addresses and later a full dataset of over 6.8M records, including names, physical addresses, phone numbers, bank account numbers, customer service notes, and in some cases dates of birth and passport or driver’s licence numbers.
Cargurus.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, IP addresses
CarGurus, an automotive marketplace, was targeted in February 2026 by the threat actor ShinyHunters, with data later published publicly exposing over 12M email addresses along with user account IDs, names, phone numbers, physical and IP addresses, and auto finance application outcomes.
Edmunds.com
Types of Data Affected: Email addresses, Usernames, Passwords, Phone numbers, IP addresses
Edmunds, an automotive research and car-shopping platform, was allegedly breached by the ShinyHunters group in January 2026, with data later published exposing 191k unique email addresses along with usernames, passwords, IP addresses, phone numbers, and vehicle-related records.
Apoia.se
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth
APOIA.se, a Brazilian crowdfunding platform, had its database posted to an online forum in December 2025 and later confirmed a breach in January 2026, exposing 451k unique email addresses along with names and physical addresses.
Figure.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth
Figure, a fintech lending platform, had customer data publicly posted online in February 2026 after a social engineering attack, exposing around 1M unique email addresses along with names, phone numbers, physical addresses, and dates of birth.
Anps.fr
Types of Data Affected: Email addresses, Names, Dates of birth, Places of birth
Association Nationale des Premiers Secours (ANPS), a French non-profit organization, had data posted to a hacking forum in January 2026, exposing 5.6k unique email addresses along with names, dates of birth, and places of birth; the incident was traced to a legacy system and did not impact health data.
Carmax.com
Types of Data Affected: Email addresses, Phone numbers, Names, Physical addresses
CarMax, a US automotive retailer, had data allegedly sourced from its systems published online in January 2026, exposing 431k unique email addresses along with names, phone numbers, and physical addresses.
Betterment.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth, Device information, Geographic locations
Betterment, an automated investment platform, confirmed a data breach in January 2026 attributed to a social engineering attack that exposed 1.4 million unique email addresses along with names and geographic location data. A subset of affected records also included dates of birth, phone numbers, and physical addresses, while the company stated the incident did not provide attackers with access to customer accounts.
Panerabread.com
Types of Data Affected: Email addresses, Phone numbers, Names, Physical addresses
Panera Bread Data Breach was disclosed in January 2026 after attackers publicly released stolen data following a failed extortion attempt. The breach exposed 14M records, including 5.1M unique email addresses alongside associated account information such as names, phone numbers, and physical addresses, with Panera Bread subsequently confirming the incident.
Instagram.com
Types of Data Affected: Email addresses, Usernames, Names, Geographic locations, Phone numbers
Instagram API Data Scrape was reported in January 2026 after a dataset allegedly scraped via an Instagram API was posted to a popular hacking forum. The dataset contained 17M rows of public Instagram information, including usernames, display names, and account IDs, with some records also containing geolocation data. Of these, approximately 6.2M records included an associated email address and a smaller subset also contained phone numbers, with the activity appearing unrelated to Instagram password reset mechanisms despite the similar timeframe.
Pass.sports.gouv.fr
Types of Data Affected: Email addresses, Phone numbers, Names, Physical addresses, Genders
Pass'Sport, a French government sports subsidy program, had its data posted to a popular hacking forum in December 2025, exposing personal information including names, phone numbers, genders, and physical addresses; the Ministry of Sports later acknowledged the incident.
Raaga.com
Types of Data Affected: Email addresses, Names, Passwords, Geographic locations, Dates of birth
Raaga, an Indian streaming music service, had data allegedly breached and posted for sale on a popular hacking forum in December 2025. The exposed dataset contained 10.2M unique email addresses along with names, genders, dates of birth and passwords stored as unsalted MD5 hashes.
Soundcloud.com
Types of Data Affected: Email addresses, Names, Geographic locations, Usernames
SoundCloud Data Breach was disclosed in December 2025 after the company identified unauthorised activity that enabled an attacker to link publicly available SoundCloud profile information to user email addresses. The incident impacted approximately 20% of SoundCloud users and exposed around 30M unique email addresses alongside names, and usernames. The attacker later attempted to extort SoundCloud before publicly releasing the dataset the following month.
Harvard.edu
Types of Data Affected: Email addresses, Names, Genders, Physical addresses, Phone numbers
Harvard University, a private research university, was allegedly breached by the ShinyHunters group in November 2025, exposing 851k unique email addresses along with names, genders, physical addresses, phone numbers, and donation-related information.
Beckett.com
Types of Data Affected: Email addresses, Names, Usernames, Phone numbers, Physical addresses
Beckett Collectibles, a US-based collectibles authentication and grading company, experienced a data breach in November 2025 accompanied by website content defacement.The impacted data included names, usernames, phone numbers, and physical addresses of 1M users.
Underarmour.com
Types of Data Affected: Email addresses, Names, Genders, Geographic locations, Dates of birth
Under Armour, an American sportswear and athletic apparel brand, was claimed as a victim by the Everest ransomware group in November 2025 in an attempted extortion alleging access to 343GB of data. Customer data from the incident was later published publicly in January 2026, exposing 73M email addresses. Many records also contained additional personal information such as names, dates of birth, genders, geographic locations and purchase information.
Codestepbystep.com
Types of Data Affected: Email addresses, Names, Usernames
CodeStepByStep, an online coding practice platform, suffered a data breach in November 2025 in which 17k user records were exposed and published online, followed by the release of an additional dataset the next month that increased the total exposure to 103k records. The compromised data included names, usernames, and email addresses.
Albertsons.com
Types of Data Affected: Email addresses, Names, Usernames, Phone numbers, Physical addresses, Dates of birth, Genders,
Albertsons, a grocery retail chain, had data allegedly exfiltrated from its Salesforce environment and published in October 2025, exposing over 151k unique email addresses along with dates of birth, genders, names, phone numbers, and physical addresses.
Upenn.edu
Types of Data Affected: Email addresses, Names, Physical addresses, Dates of birth, Religions, Income levels
The University of Pennsylvania, an Ivy League research university, was the victim of a data breach in October 2025 followed by a ransom demand that largely impacted its donor database. The data was later published online in February 2026 and included 624k unique email addresses alongside names and physical addresses.
Substack.com
Types of Data Affected: Email addresses, Phone numbers
Substack, a publishing and newsletter platform, suffered a data breach in October 2025 that was later circulated more widely in February 2026. The breach exposed 665k account holder records containing email addresses along with publicly visible profile information from Substack accounts, such as publication names and bios.
Breachforums.hn
Types of Data Affected: Email addresses, Usernames, Passwords
BreachForums data breach occurred in the months leading up to the forum’s October 2025 takedown by an international law enforcement coalition, exposing data from the platform itself. The breach leaked a total of 324K unique email addresses across multiple database tables, including forum posts and private messages.
Tiszavilag.hu
Types of Data Affected: Email addresses, Names, Usernames, Physical addresses, Phone numbers
TISZA, a Hungarian political party, suffered a data breach in late October 2025 when data from its TISZA Világ service was published online and widely redistributed. The incident exposed 200k personal records, including email addresses, names, phone numbers, and physical addresses.
Myvidster.com
Types of Data Affected: Email addresses, Usernames
MyVidster, a video-sharing platform, suffered a data breach in October 2025 that was later posted on a public hacking forum. The incident exposed the information of nearly 4 million users, including usernames and email addresses.
Wired.com
Types of Data Affected: Email addresses, Dates of birth, Names, Geographic locations, Phone numbers, Physical addresses
WIRED, the technology magazine, allegedly suffered a data breach in December 2025 after data believed to be sourced from parent company Condé Nast was published online. The incident exposed 2.4M user records, with the most recent data dating back to September 2025, and included email addresses and display names, as well as for a smaller subset of users, full names, phone numbers, dates of birth, genders, and geographic location or full physical addresses. The exposed WIRED data is reported to represent only a subset of a larger Condé Nast dataset claimed by the threat actor.
Giglio.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses
Giglio Data Breach was reported in August 2025 after data allegedly obtained from the Italian fashion designer Giglio appeared online. The breach exposed over 1M unique email addresses along with associated names, phone numbers, and physical addresses.
Artistsnclients.com
Types of Data Affected: Email addresses, Usernames, Passwords, IP addresses
Artists&Clients, the marketplace connecting artists with prospective clients, suffered a data breach in August 2025 followed by a ransom demand. The data was later leaked publicly and exposed 95k unique email addresses along with usernames, IP addresses, and passwords stored as bcrypt hashes.
Miljodata.se
Types of Data Affected: Email addresses, Names, Phone numbers, Dates of birth, Genders, Government issued IDs, Physical addresses
Miljödata, a Swedish system supplier, suffered a ransomware attack in August 2025 that led to stolen data being published on the dark web. The breach exposed 870k unique email addresses across multiple compromised files, along with names, phone numbers, physical addresses, dates of birth, and government-issued personal identity numbers.
Bouyguestelecom.fr
Types of Data Affected: Email addresses, Names, Phone numbers, Dates of birth, Physical addresses
The Bouygues Telecom data breach in August 2025 exposed almost 6.4M customer records, including 5.7M unique email addresses, along with names, physical addresses, phone numbers, and dates of birth.
Canadagoose.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, IP addresses, Device information
Canada Goose, the luxury outerwear retailer, investigated after customer data was published publicly in February 2026. The leak contained 920k records with 582k unique email addresses, alongside names, phone numbers, IP addresses, physical addresses, and partial payment card data. Canada Goose stated the information appeared to relate to past customer transactions and originated from a third-party breach in August 2025.
Hellocake.com
Types of Data Affected: Email addresses, Names, Phone numbers, Dates of birth
Hello Cake, a sexual healthcare product maker, suffered a data breach in July 2025 that was later posted to a public hacking forum. The incident exposed 23k unique email addresses along with names, phone numbers, physical addresses, and dates of birth.
TheSqua.re
Types of Data Affected: Email addresses, Names, Phone numbers, Geographic locations
TheSqua.re, a serviced apartment booking platform, had 107k unique customer email addresses allegedly obtained and later posted to a popular hacking forum in June 2025, along with names, phone numbers, and cities.
Vietnamairlines.com
Types of Data Affected: Email addresses, Names, Dates of birth, Phone numbers
In October 2025, data stolen from the Salesforce instances of multiple companies by a hacking group calling itself “Scattered LAPSUS$ Hunters†was publicly released. Among the impacted organisations was Vietnam Airlines, which had 7.5M unique customer email addresses exposed following a breach of its Salesforce instance in June of that year. The compromised data also included names, phone numbers, and dates of birth.
Mareads.com
Types of Data Affected: Email addresses, Usernames, Dates of birth, Phone numbers
The MaReads Data Breach in June 2025 affected the Thai-language fiction and comics platform, exposing 75K records. The compromised data included usernames, email addresses, phone numbers, and dates of birth.
Creamscafe.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers
The Creams Cafe Data Breach in May 2025 allegedly exposed 160K customer records from the UK-based dessert parlour. The compromised data included email addresses, physical addresses, names, and phone numbers.
Autosur.fr
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers, Vehicle details
AUTOSUR, the French vehicle inspection company, suffered a data breach in March 2025 that exposed over 10 million customer records, including 489k unique email addresses. The compromised data included names, phone numbers, physical addresses, and detailed vehicle information such as make and model, VINs, and registration plates, and the company later issued a public disclosure notice with additional details.
Adda.io
Types of Data Affected: Email addresses, Names, Phone numbers, Passwords
ADDA, a housing societies management service, suffered a data breach in March 2025 that was later posted on a public hacking forum. The incident exposed data containing over 1.8 million unique email addresses, along with names, phone numbers, and MD5 password hashes.
Samsung.de
Types of Data Affected: Email addresses, Names, Physical addresses
The Samsung Germany Data Breach in March 2025 occurred via a compromise of their logistics provider, Spectos, reportedly caused by malware on an employee’s device. The breach exposed 218K unique email addresses along with names, physical addresses, and details of items purchased from Samsung Germany.
Germandonerkebab.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses
The German Doner Kebab Data Breach in March 2025 exposed data published on a popular hacking forum, including 162k unique email addresses along with names, phone numbers, and physical addresses. The company issued a disclosure notice to affected individuals following the incident.
Lexipol.com
Types of Data Affected: Email addresses, Usernames, Passwords, Names, Phone numbers
The Lexipol Data Breach in February 2025 exposed over 673K unique email addresses along with names, phone numbers, system-generated usernames, and passwords stored as either MD5 or SHA-256 hashes. The breach involved a significant number of internal documents and user records, all of which were later published publicly.
Orange.com
Types of Data Affected: Email addresses, Usernames, Physical addresses, Phone numbers, Names
The Orange Data Breach in February 2025 affected multiple global divisions, with a major impact on Orange Romania. The incident exposed nearly 600K customer records, including email addresses, usernames, physical addresses, phone numbers, and names. Orange confirmed the breach on February 24, with the data subsequently leaked on 25 February 2025 on a popular hacking forum.
Doxbin.com
Types of Data Affected: Email addresses, Usernames
The Doxbin Data Breach in February 2025 involved the compromise of the doxing website Doxbin by a group known as "TOoDA," which publicly dumped the data. The breach exposed 136K unique email addresses along with usernames.
Rezeptwelt.de
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth, Usernames
Rezeptwelt, a Thermomix owners’ recipe forum, suffered an incident in January 2025 that exposed details of 3.1M registered users, including names, email and physical addresses, phone numbers, and dates of birth.
Frameandoptic.com
Types of Data Affected: Email addresses, Names, Phone numbers, Geographic locations
The Frame & Optic Data Breach in January 2025 led to the exposure of nearly 16K unique email addresses along with names, phone numbers, and geolocation data. This sensitive information was subsequently posted on a popular hacking forum
Maxance.com
Types of Data Affected: Email addresses, Names, Usernames, Phone numbers, Physical addresses,
Maxance, a French wholesale insurance broker, was breached in December 2024 with the data later leaked, exposing over 348k client records including 268k unique email addresses, names, genders, IBANs, physical addresses, phone numbers, login details, and vehicle information.
Bitview.net
Types of Data Affected: Email addresses, Usernames, Passwords, IP addresses, Genders, Geographic locations, Dates of birth
BitView, a video-sharing community, suffered an incident in December 2024 that exposed 63k user records, including email and IP addresses, usernames, bcrypt password hashes, and for some users, gender, date of birth, and country.
1win.com
Types of Data Affected: Email addresses, Dates of birth, Passwords, Phone numbers, IP addresses, Geographic locations
The 1win Data Breach exposed sensitive information of 96 million users from the online betting platform. The compromised data included email and IP addresses, phone numbers, dates of birth, country details, and SHA-256 password hashes.
Poincampus.com
Types of Data Affected: Email addresses, Names, Dates of birth, Phone numbers
The PoinCampus Data Breach in November 2024 affected the South Korean education platform, exposing 89K unique email addresses along with names and a limited number of phone numbers and dates of birth. The compromised data was later published on a popular hacking forum.
Tibber.com
Types of Data Affected: Email addresses, Names, Geographic locations
The Tibber Data Breach of 2024 exposed the personal information of 50K customers. The data compromised included names, email addresses, geographic locations (city and postcode), and total spend on purchase.
Yonema.com
Types of Data Affected: Email addresses, Names, Passwords, Phone numbers, IP addresses, Dates of birth
The Yonéma Data Breach in November 2024 involved the Senegalese payment platform having its customer data leaked on a popular hacking forum. The breach compromised 36K unique email addresses along with associated phone numbers, names, dates of birth, and encrypted passwords.
Free.fr
Types of Data Affected: Email addresses, Names, Genders, Phone numbers, Physical addresses, Dates of birth
In October 2024, the French ISP Free suffered a data breach. The incident exposed 14.2M unique email addresses along with names, physical addresses, phone numbers, genders, dates of birth, and for many users, bank account numbers.
Cultura.co
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers
Cultura, a French retail chain, was the victim of a cyber attack in September 2024 that it attributed to an external IT service provider. The resulting data breach exposed almost 1.2M unique email addresses along with names, phone numbers, physical addresses, and order details.
Boulanger.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses
The Boulanger Data Breach in September 2024 exposed over 27 million rows of data from the French electronics retailer. The breach included more than 2M unique email addresses, names, physical addresses, phone numbers, and geographic coordinates, and was later publicly posted on a popular hacking forum.
Digidirect.com.au
Types of Data Affected: Email addresses, Names, Dates of birth, Phone numbers, Physical addresses
The digiDirect Data Breach in September 2024 involved the Australian retailer experiencing a significant security incident where over 300,000 rows of customer data were leaked on a popular hacking forum. The exposed data included email and physical addresses, names, phone numbers, and dates of birth of the affected customers.
Tracelo.com
Types of Data Affected: Email addresses, Names, Passwords, Phone numbers, Physical addresses
The Tracelo Location Tracker Data Breach in September 2024 led to the exposure of 1.4 million records, revealing personal details of both customers and tracked individuals. Data leaked included names, phone numbers, addresses, email addresses, and password hashes.
Ind.cl
Types of Data Affected: Email addresses, Names, Passwords, Usernames, Dates of birth, Genders
The Instituto Nacional de Deportes de Chile (Chile's National Sports Institute) experienced a data breach that exposed information including 320K unique email addresses, names, dates of birth, genders, and bcrypt password hashes.
Infinitylearn.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Customer support tickets
InfinityLearn, an online education platform, was exposed in August 2024, leaking 4.7M records containing phone numbers, admission numbers, email addresses, usernames, profile photos, names, WhatsApp consent status, and passwords.
Schenkyou.de
Types of Data Affected: Email addresses, Passwords, Names, Dates of birth
The schenkYOU Data Breach saw data from the online German gift store being put up for sale on a popular hacking forum, obtained just a month prior. The leaked data included 240K unique email addresses along with names, dates of birth, and salted SHA-256 password hashes.
Chrisleong.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers, Social media profiles, Genders, Nationalities, Dates of birth
The Master Chris Leong Website Breach in August 2024 resulted in the exposure of personal information of 27k individuals, including unique email addresses, names, physical addresses, dates of birth, genders, and nationalities.
Types of Data Affected: Email addresses
SOCRadar faced allegations from a threat actor, identified as USDoD, claiming a leak of over 330 million email addresses. However, SOCRadar's investigation revealed no breach of its internal systems. The actor had legitimately acquired access to SOCRadar's platform and utilized its capabilities to gather publicly available email addresses from Telegram channels. SOCRadar confirmed that no customer data or sensitive internal information was compromised.
Msi.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers
MSI, the Taiwanese computer hardware manufacturer, inadvertently exposed hundreds of thousands of customer records in July 2024 after data related to RMA warranty claims was found to be publicly accessible. The incident impacted 250k unique email addresses alongside names, phone numbers, physical addresses, and warranty claim details.
Fntech.com
Types of Data Affected: Email addresses, Names, IP addresses
The Roblox Developer Conference Registration Platform Data Breach in July 2024 exposed 10k unique email addresses, along with names and IP addresses. The breach affected registrants from multiple events, including participants of the Roblox Developer Conference registration list.
Animeleague.net
Types of Data Affected: Email addresses, Usernames, Passwords, Dates of birth, Phone numbers
The AnimeLeague Data Breach in July 2024 involved the exposure of significant user data from their event registration system and phpBB bulletin board, which was subsequently posted for sale on a popular hacking forum. This breach affected and exposed sensitive information including 192K unique email addresses, usernames, private messages, dates of birth, and purchase details. The passwords compromised were stored in various hashed formats, such as SHA-1, salted MD5, and bcrypt.
Centraltickets.co.uk
Types of Data Affected: Email addresses, Names, IP addresses, Passwords, Phone numbers
The Central Tickets Data Breach in September 2024 involved the public posting of data from the ticketing service to a hacking forum. The breach, which appears to have occurred earlier exposed 723K unique email addresses, along with names, phone numbers, IP addresses, purchases, and passwords stored as unsalted SHA-1 hashes.
Luluhypermarket.com
Types of Data Affected: Email addresses, Phone numbers
The LuLu Retail Store Data Breach in July 2024 impacted the Emirati-based retailer, resulting in the exposure of 190K email addresses and associated phone numbers. This sensitive customer data was subsequently shared on a popular hacking forum.
Ubook.com
Types of Data Affected: Email addresses, Names, Dates of birth
The Ubook Data Breach in July 2024 involved 701k unique email addresses from the audiobook platform Ubook being posted to a popular hacking forum. The data, allegedly scraped from Ubook Exchange (UBX) and included names, genders, and dates of birth.
Heritage.org
Types of Data Affected: Email addresses, Names, Usernames, Passwords, IP addresses
The Heritage Foundation Data Breach in July 2024 led to the publication of nearly 2GB of data by hacktivists, affecting both The Heritage Foundation and its media arm, The Daily Signal. The leaked data included 72,000 unique email addresses, primarily associated with individuals who commented on articles. Alongside the email addresses, the leak also exposed names, IP addresses, and the comments made by these individuals.
Husky-owners.com
Types of Data Affected: Email addresses, Dates of birth, Usernames
The Husky Owners Forum Data Breach in July 2024 involved a website defacement linked to a leak of approximately 16670 user records. The compromised data included usernames, email addresses, dates of birth, and time zones.
Mspy.com
Types of Data Affected: Email addresses, Names, IP addresses
The mSpy Data Breach in June 2024 resulted in a massive leak involving 142GB of user data and support tickets, plus an additional 176GB comprising over half a million attachments. This comprehensive data set included 2.1 million unique email addresses, and IP addresses primarily associated with support tickets for spyware installation. The attachments contained sensitive content, including financial transaction screenshots, credit card photos, and nude selfies, highlighting significant privacy and security risks.
Ticketek.com.au
Types of Data Affected: Email addresses, Names, Passwords, Dates of birth, Genders
The Ticketek Data Breach in May 2024, reported by the Australian event ticketing company, was linked to a third-party cloud-based platform. In June 2024, the compromised data, including nearly 30 million rows with 17.6 million unique email addresses, along with names, genders, dates of birth, and hashed passwords, appeared for sale on a popular hacking forum.
Neimanmarcus.com
Types of Data Affected: Email addresses, Names, IP addresses, Phone numbers, Physical addresses, Partial credit card data
The Neiman Marcus Data Breach in May 2024 resulted in 31 million unique email addresses, along with names, phone numbers, dates of birth, physical addresses, and partial credit card data. This breach was part of a wider series of attacks targeting the Snowflake cloud service.
Pctattletale.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Usernames, Device information
The pcTattletale Data Breach involved a significant compromise of the spyware service's website, resulting in the defacement of the site and the posting of tens of gigabytes of sensitive data on the homepage. This breach occurred allegedly because pcTattletale did not address a previously reported security vulnerability. The exposed data included membership records, names of infected PCs, captured messages, and extensive logs detailing IP addresses and device information, raising serious privacy and security concerns.
Thepostmillennial.com
Types of Data Affected: Email addresses, Names, Passwords, Phone numbers, IP addresses, Physical addresses
The Post Millennial, a conservative Canadian news site, experienced a significant data breach earlier this month, affecting 26 million individuals. The breach involved the theft of various personal data from the site's subscriber database and content creators, including names, email addresses, usernames, passwords, IP addresses, phone numbers, and physical addresses. The website was also defaced, displaying fake messages allegedly from its editor.
Movieboxpro.app
Types of Data Affected: Email addresses, Usernames
The MovieBoxPro Data Breach in April 2024 resulted in over 6 million records being scraped from a vulnerable API of the streaming service. MovieBoxPro provided no contact information to report the incident.
Sport2000.fr
Types of Data Affected: Email addresses, Names, Dates of birth, Phone numbers, Physical addresses
The Sport 2000 Data Breach in April 2024 impacted the French sporting equipment manufacturer, leading to the exposure of 4.5 million rows of data. This breach included 3.2 million unique email addresses, along with customers' names, physical addresses, phone numbers, dates of birth, and details of purchases made by store name. The compromised data was subsequently offered for sale on a popular hacking forum.
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth, Government issued IDs
The El Salvador Data Breach involved nearly 6 million records of Salvadoran citizens being published on a popular hacking forum. The exposed data included names, dates of birth, phone numbers, physical addresses, nearly 1 million unique email addresses, and over 5 million profile photos.
Tappware.com
Types of Data Affected: Email addresses, Dates of birth, Names, Genders, Phone numbers, Physical addresses,
The Tappware Data Breach in April 2024 involved a significant data compromise where more than 92K unique email addresses were leaked. The breach of the Bangladeshi IT services provider also exposed detailed labor information, including names, physical addresses, job titles, dates of birth, genders, and scans of government-issued national identity cards.
Pipingrock.com
Types of Data Affected: Email addresses, Phone numbers, Names, Physical addresses
The Piping Rock Data Breach in April 2024 involved the exposure of 2.1 million email addresses from the online health products store. The compromised data, which was posted to a popular hacking forum, also included customers' names, phone numbers, and physical addresses. This breach underscores the ongoing vulnerability of personal information in the digital marketplace.
T2tea.com
Types of Data Affected: Email addresses, Names, Phone numbers, Passwords, Genders, Dates of birth
The T2tea data breach resulted in 88k records being compromised. The leaked data includes customer email and physical addresses, names, phone numbers, dates of birth, purchase histories, and Scrypt-encrypted password hashes.
Leslipfrancais.fr
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Geographic locations
The Le Slip Français Data Breach in April 2024 resulted in the exposure of personal information belonging to 1.5 million people. The compromised data included names, email addresses, physical addresses, and phone numbers.
Xpressbees.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Geographic locations
The XpressBees Data Breach, disclosed by "IntelBroker" on BreachForums, exposed the personal information of about 95K users. The leaked data, available for public download, could include names, addresses, email addresses, and phone numbers. XpressBees has yet to issue a formal response regarding the breach's specifics or confirm the nature of the data accessed.
Huntstand.com
Types of Data Affected: Email addresses, Names, Dates of birth, Geographic locations
The HuntStand Data Breach in March 2024 involved the public posting of millions of records scraped from the hunting and land management service to a popular hacking forum. The leaked data includes 2.8 million unique email addresses and often contains additional details such as names, dates of birth, and countries.
Life360.com
Types of Data Affected: Email addresses, Phone numbers, Names
The Life360 Data Breach in July 2024 resulted from data being scraped from a misconfigured API and posted online. This incident exposed records of 443k unique email addresses, with most records also including corresponding names and phone numbers.
Wotlabs.net
Types of Data Affected: Email addresses, Usernames, Dates of birth, IP addresses
WoTLabs, a World of Tanks statistics and resources site, experienced a data breach in March 2024. This incident compromised personal data of approximately 22,000 forum members, including their email and IP addresses, usernames, dates of birth, and time zones.
Gianttiger.com
Types of Data Affected: Email addresses, Phone numbers, Names, Physical addresses
The Giant Tiger data breach, linked to a third-party vendor handling customer communications, involved compromised contact information such as names, email addresses, and for some, phone numbers and street addresses. Detected on 4 March 2024 and confirmed by Giant Tiger, the breach did not affect payment information or passwords.
Kasperskyclub.ru
Types of Data Affected: Email addresses, Usernames, Passwords, IP addresses
The Kaspersky Fan Club Forum data breach involved the leakage of personal data for 56,798 users by a hacker group known as RGB. The breach, reported to have occurred on March 24, 2024, with data leaked on April 4, 2024, impacted the Russian language fan club forum, a popular discussion platform for Kaspersky Labs enthusiasts. Despite being an unofficial platform, the breach included data from nearly 200 users with Kaspersky.com email addresses, indicating the potential inclusion of Kaspersky employees' data.
Boat-lifestyle.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Geographic locations
The boAt data breach incident, disclosed on 5-April-2024 by a hacker known as ShopifyGUY on a forum, has resulted in the leak of personal data for over 7.5 million boAt customers. This compromised data, amounting to around 2GB and spanning 7.5 milion entries, encompasses a wide range of personally identifiable information (PII), such as names, addresses, contact numbers, email IDs, customer IDs, and more.
Pandabuy.com
Types of Data Affected: Email addresses, Phone numbers, Names, IP addresses, Physical addresses
The PandaBuy Data Breach, reported by threat actors 'Sanggiero' and 'IntelBoker,' exposed information of over 1.3 million users by exploiting platform vulnerabilities. Critical data including user IDs, names, contact details, orders, and addresses were leaked on a forum, available for purchase with cryptocurrency.
Mediaworks.co.nz
Types of Data Affected: Email addresses, Dates of birth, Genders, Physical addresses, Phone numbers
The MediaWorks data breach has impacted close to 400,000 individuals, initially feared to affect up to 2.5 million. This attack targeted a database of online competition entries dating back to 2016. The compromised information includes names, birthdates, genders, addresses, email addresses, and phone numbers, with some entries containing images or videos submitted for competitions.
Mrgreengaming.com
Types of Data Affected: Email addresses, IP addresses, Geographic locations, Usernames, Dates of birth
MrGreenGaming announced on their community forum reported a security breach due to unauthorized access via an inactive administrator account leading to a data breach on 01-Mar-2024. The intrusion led to vandalism and the potential exposure of user data, including usernames, email addresses, IP addresses at account creation, and birthdays.
Demandscience.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers, Social media profiles
The DemandScience Data Breach, involving a company owned by Pure Incubation, featured a large set of data that was put up for sale on a popular hacking forum. This breach was later traced back to a leak from a decommissioned legacy system. The compromised data included extensive business contact information, largely aggregated from public sources, encompassing 122 million unique corporate email addresses, along with physical addresses, phone numbers, names of employers, job titles, and social media handles.
Tangerinetelecom.com.au
Types of Data Affected: Email addresses, Names, Dates of birth, Passwords, Phone numbers, Physical addresses
Tangerine Telecom Data Breach in February 2024 affected over 240K customer records and the exposed data included physical and email addresses, names, phone numbers, and dates of birth.
Ldlc.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers
LDLC Data Breach in 2024 impacted customers of the French retailer's physical stores, revealing sensitive data that was later listed for sale on a hacking forum. The compromised data included 1.5 million unique email addresses, along with names, phone numbers, and physical addresses of the affected individuals.
Exploretalent.com
Types of Data Affected: Email addresses, Phone numbers, Names, Physical addresses
The Explore Talent Data Breach, reported to have occurred between early 2022 and 2023, was disclosed on a popular hacking forum. The breach involved 5.7 million rows of data, including 5.4 million unique email addresses, along with names, phone numbers, and physical addresses.
Cutout.pro
Types of Data Affected: Names, Passwords, Email addresses, IP addresses
Cutout.Pro, an AI-powered photo editing platform, experienced a data breach affecting 20 million users. Information exposed includes email addresses, hashed passwords, IP addresses, and names. A cybercriminal posted 5.93 GB of data on hacker forum, including a 41.4 million record database dump with unique email addresses.
Trello.com
Types of Data Affected: Email addresses, Names, Usernames
The Trello Data Scraping Incident in January 2024 resulted in over 15 million email addresses, names, and usernames being posted for sale on a popular hacking forum. This data was collected by enumerating a publicly accessible resource using email addresses sourced from previous breach datasets. Trello has stated that this incident did not involve unauthorized access to their systems.
Tube.inflatevids.xyz
Types of Data Affected: Email addresses, Usernames, Passwords, Genders, IP addresses
The InflateVids Data Breach in December 2023 exposed over 13K unique email addresses along with usernames, IP addresses, genders, and passwords stored as SHA-1 hashes. The breach impacted users of the inflatable and balloon fetish videos website.
Welhof.com
Types of Data Affected: Email addresses, Names, Physical addresses
The Welhof Data Breach in December 2023 exposed more than 100K unique email addresses, along with names and physical addresses.
Hathway.com
Types of Data Affected: Email addresses, Names, Passwords, IP addresses, Device information, Physical addresses
Hathway, an Indian internet service provider and digital TV operator, was allegedly breached in December 2023, exposing 43.9M unique email addresses along with names, physical addresses, IP addresses, phone numbers, password hashes, and support ticket logs.
Bloomstoday.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses
The Blooms Today Data Breach involved the listing of 15 million records from the online florist on a popular hacking forum. The data, most recently updated in November 2023, included 3.2 million unique email addresses, names, phone numbers, and physical addresses.
Zadig-et-voltaire.com
Types of Data Affected: Email addresses, Names, Phone numbers, Genders, Physical addresses
The Zadig & Voltaire Data Breach in June 2024 resulted in the exposure of personal data from the French fashion brand, which was posted on a popular hacking forum. The compromised data included names, email and physical addresses, phone numbers, and genders of an undisclosed number of individuals.
Kitchenpalapp.com
Types of Data Affected: Email addresses, Names, Passwords, Social media profiles, Genders, Dates of birth
KitchenPal's November data breach exposed data from a staging environment, impacting more than 99k users. Revealed details included email addresses, names, geolocations, partial birth dates, genders, physical measurements, social media IDs, and bcrypt-hashed passwords.
Bleachanime.org
Types of Data Affected: Email addresses, Passwords
The Bleach Anime Forum suffered a data breach in November 2023. The breach resulted in the exposure of user email addresses and passwords.
Chess.com
Types of Data Affected: Email addresses, Names, Geographic locations, Usernames
The Chess website suffered a data scraping incident in November 2023, where over 800,000 user records were made public on a hacking forum. The exposed data included user email addresses, names, usernames, and geographic locations.
Facebook.com
Types of Data Affected: Email addresses, Names, Passwords, Geographic locations, Phone numbers
In October 2023, a cybercriminal breached a Meta contractor's systems, stealing a partial database from Facebook Marketplace containing 200,000 records. The data leaked on a hacker forum by "IntelBroker" included mobile numbers, email addresses, and other personal details of users. The exposure raises significant privacy concerns, with potential for phishing and SIM swap attacks.
Toumei.co.jp
Types of Data Affected: Names, Email addresses, Phone numbers, Physical addresses
Japanese consultancy firm Toumei suffered a data breach n 2023 that exposed over 100 million lines and 10GB of data, including 77,000 unique email addresses, names, phone numbers, and physical addresses
Shadow.tech
Types of Data Affected: Email addresses, Names, Dates of birth, Physical addresses
The Shadow Data Breach in September 2023 impacted the cloud gaming provider, exposing over half a million customer records. The leaked data included sensitive information such as email and physical addresses, names, and dates of birth.
Sphero.com
Types of Data Affected: Names, Email addresses, Geographic locations, Usernames, Dates of birth
Sphero, a Hong Kong-based firm specializing in programmable robots and educational tools, suffered a data breach in 2023. A hacker allegedly stole and publicized the personal information of a million educators and students from Sphero's database.
Marketmoveis.pt
Types of Data Affected: Email addresses, Names
The Market Moveis Data Breach in August 2023 affected 28K records from the Portuguese home decor company. The data compromised in the breach included only names and email addresses.
Magicduel.com
Types of Data Affected: Usernames, Email addresses, Passwords, IP addresses
MagicDuel Adventure, in August 2023, faced a data breach impacting 138k users. Due to a simple vulnerability, player names, email and IP addresses, along with bcrypt password hashes were compromised.
Ffr.fr
Types of Data Affected: Email addresses, Names, Phone numbers, Dates of birth
The Fédération Française de Rugby Data Breach in June 2023 exposed 282K unique email addresses along with names, dates of birth, and phone numbers. The breach was accompanied by an attempted ransom, and the Federation confirmed the incident in a public disclosure, noting that the attack primarily targeted their email servers.
Rightdev.co.uk
Types of Data Affected: Names, Email addresses, Physical addresses, Phone numbers
The Rightbiz data breach in July 2023 resulted in the exposure of data from the UK's prominent business marketplace. The breach revealed over 18 million rows of data, including 65k unique email addresses, alongside names, phone numbers, and physical addresses.
Breachforums.vc
Types of Data Affected: Email addresses, Passwords, IP addresses, Usernames
BreachForums, a hacking forum, was compromised in June 2023 when an exposed MyBB database backup leaked more than 4k records including email addresses, IP addresses, usernames, and Argon2 password hashes.
Dymocks.com.au
Types of Data Affected: Names, Genders, Email addresses, Phone numbers, Physical addresses, Dates of birth
Dymocks Booksellers, a bookstore chain operating in Australia, New Zealand, and Hong Kong, experienced a data breach in September 2023. Although Dymocks has not found evidence of a breach in its computer systems, the incident is under investigation, with a focus on potential security issues with third-party partners. Customer data compromised in the breach includes full names, dates of birth, email addresses, postal addresses, gender, and membership details.
Lecoqsportif.com.co
Types of Data Affected: Email addresses, Passwords, Dates of birth, Physical addresses, Genders, IP addresses, Device information
The Le Coq Sportif Data Breach involved the Columbian website of the popular sportswear brand, with the details posted to a popular hacking forum. The breach, dating back to May 2023, impacted almost 80k unique email addresses and included extensive customer data such as physical and IP addresses, names, purchases, genders, dates of birth, and bcrypt password hashes.
Craftrise.com.tr
Types of Data Affected: Email addresses, Passwords, Usernames, Geographic locations
The Turkish Minecraft server CraftRise experienced a data breach, impacting over 2.5 million users. This breach involved the exposure of email addresses, usernames, geographic locations, and plain text passwords. The data appears to have been obtained in March 2022 and was later shared on a well-known hacking forum.
Angelone.in
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth, Government issued IDs, Bank account numbers
Angel One, an Indian stock brokerage firm, was breached in April 2023, with data later leaked online exposing 7.9M user records including 6.8M unique email addresses along with names, physical addresses, phone numbers, bank account numbers, Permanent Account Numbers (PANs), and portfolio holdings.
Rentomojo.com
Types of Data Affected: Email addresses, Names, Passwords, Phone numbers, Government issued IDs, Dates of birth, Social media profiles
The RentoMojo Data Breach in April 2023 led to the exposure of sensitive data for approximately 2.1 million users. The compromised information included unique email addresses, names, phone numbers, passport and Aadhaar numbers, genders, dates of birth, and bcrypt password hashes.
Tigo.chat
Types of Data Affected: Email addresses, Usernames, Passwords, Names, Physical addresses, Phone numbers
The Tigo Data Breach in mid-2023 involved the exposure of 300GB of data from the Chinese video chat platform, containing over 100 million records. The breach included more than 700K unique names, usernames, email and IP addresses, genders, profile photos, and private messages.
Dchealthlink.com
Types of Data Affected: Email addresses, Ethnicities, Genders, Phone numbers, Names, Physical addresses, Social security numbers
The D.C. Health Link Data Breach, attributed to a Russian hacker named “Denfur†and motivated by Russian patriotism, has compromised sensitive healthcare information of 56,415 customers, including Congress members and their families. The breach, first reported on March, 2023, involved names, email addresses, Social Security numbers, and insurance details. Despite its low technical sophistication, the breach was effective, exposing a wide range of individuals in the D.C. area to potential identity theft and cyberattacks.
Ecb.co.uk
Types of Data Affected: Email addresses, Passwords
The England and Wales Cricket Board breach in March 2023 resulted in the exposure of personal information for approximately 43,000 users, encompassing records from 2014 to 2021. This breach disclosed email addresses along with passwords, which were protected using bcrypt hashes, salted MD5 hashes
Hdbfs.com
Types of Data Affected: Names, Email addresses, Geographic locations, Genders, Phone numbers, Dates of birth
HDB Financial Services, a non-bank lending unit of HDFC Bank, reported a data breach at one of its service providers responsible for processing customer information. The breach exposed customer data, although specific details about the breach's extent and the types of data exposed were not immediately disclosed.
Cityjerks.com
Types of Data Affected: Email addresses, Dates of birth, Usernames, Passwords, IP addresses, Geographic locations, Sexual preferences
The CityJerks Data Breach recently exposed highly personal data from the specialized dating site, along with another site. Both breaches were orchestrated by the same attacker and exposed data includes sensitive information like direct messages, email addresses, sexual orientations, and more, affecting tens of thousands of users.
Convex.ru
Types of Data Affected: Email addresses, Names, Phone numbers
A hacktivist group has leaked 128 GB of data alleging that the Russian government has been illegally spying on its citizens. The data includes details of the Green Atom monitoring program, purportedly run by Russia's Federal Security Service (FSB), and reveals how the government monitors citizens' phone and internet activities.
Idtech.com
Types of Data Affected: Names, Email addresses, Dates of birth, Passwords
iD Tech, a tech camp service for kids, experienced a data breach in February 2023. Nearly 1 million records were posted on a renowned hacking forum. This breach exposed 415k unique email addresses, names, dates of birth, and plain text passwords.
Eye4fraud.com
Types of Data Affected: Email addresses, Names, Phone numbers, Physical addresses
The "fraud protection service" Eye4Fraud experienced a data breach, exposing 16 million unique email addresses. This breach affected both direct users of the service and individuals whose data was transferred due to their dealings with merchants using Eye4Fraud for protection. The compromised data included names, bcrypt password hashes for users, and partial credit card details for orders placed through the service.
Duolingo.com
Types of Data Affected: Email addresses, Names, Usernames
Data belonging to 2.6 million Duolingo users was scraped in January 2023. This data included real names, login names, email addresses, and internal DuoLingo service information. The leak stemmed from an exposed API that allowed threat actors to confirm email addresses associated with DuoLingo accounts.
Autotrader.com
Types of Data Affected: Email addresses, Phone numbers, Physical addresses, Vehicle identification numbers
Autotrader, a popular online marketplace for car buyers and sellers, was breached in 2023. The compromised data included phone numbers, email addresses, physical addresses, vehicle details, and vehicle identification numbers.
Railyatri.in
Types of Data Affected: Email addresses, Phone numbers, Genders, Physical addresses
RailYatri, an Indian train ticket platform, experienced a data breach around December 2022 that affected 31 million entries. The compromised data encompassed Email addresses, Full names, Genders, Phone numbers, and Locations.
Sevenrooms.com
Types of Data Affected: Email addresses, Names
SevenRooms, a restaurant customer management platform, was compromised in December 2022, exposing 1.2M unique email addresses along with names and purchase information following unauthorised access to a third-party vendor's file transfer interface.
Gemini.com
Types of Data Affected: Email addresses
Gemini, a cryptocurrency exchange, experienced a data breach originating from a third-party vendor before Dec-2022. Hackers accessed approximately 5.7 million lines of information, including email addresses and partially obfuscated phone numbers of Gemini customers.
Cointracker.io
Types of Data Affected: Email addresses, Phone numbers
CoinTracker experienced a security breach in 2022 where user emails were exposed due to a breach on email service provider SendGrid's database. However, after thorough analysis, it was determined that CoinTracker's own database was not breached. The extent of the leak was limited to email addresses, with no financial data or phone numbers exposed.
Breached.vc
Types of Data Affected: Email addresses, IP addresses
The BreachForums Data Breach in November 2022 resulted in the exposure of 212,611 records, including usernames, IP and email addresses. The following year, the operator of the website was arrested, and the site was seized by law enforcement agencies, marking a significant turn in the ongoing efforts to combat cybercrime.
Foodworkercard.wa.gov
Types of Data Affected: Email addresses, Names, Geographic locations, Dates of birth
The Tacoma-Pierce County Health Department Data Breach, revealed in June 2023, involved a breach dating back to November 2018, impacting 1.5 million unique records from the Washington State Food Worker Card online training database. Key compromised data included names, ZIP codes, birth dates, and email addresses, with some information briefly appearing on the dark web.
Mypertamina.id
Types of Data Affected: Email addresses, Names, Dates of birth, Phone numbers, Physical addresses
Pertamina, an Indonesian oil and gas company, suffered an incident in November 2022 that exposed 44M records including 6M unique email addresses along with names, dates of birth, genders, physical addresses, and purchase information.
Movieforums.com
Types of Data Affected: Usernames, Passwords, Email addresses, IP addresses, Dates of birth
The Movie Forums website experienced a data breach on November,2022. This breach compromised passwords, IP addresses, email addresses, and dates of birth of its users.
Abandonia.com
Types of Data Affected: Usernames, Passwords, Email addresses, IP addresses
Abandonia suffered a data breach in 2022, which exposed user data, including usernames, passwords, email addresses, and IP addresses.
Locally.com
Types of Data Affected: Usernames, Passwords, Email addresses, Geographic locations, Phone numbers, Physical addresses
Locally, in October 2022, experienced a significant data breach impacting its users. The incident led to the exposure of full names, phone numbers, usernames, physical addresses, partial credit card details, and passwords encrypted as bcrypt hashes.
Realdudesinc.com
Types of Data Affected: Usernames, Passwords, Email addresses
RealDudesInc suffered a data breach on October 22, 2022, during which user information, including usernames, passwords, and email addresses, was exposed.
Doomworld.com
Types of Data Affected: Email addresses, IP addresses, Usernames, Passwords, Dates of birth
The Doomworld forum suffered a data breach In 2022,. The vBulletin forum had 34K breached accounts. In the breach, email addresses, usernames, hashed passwords, and dates of birth were exposed.
Onlinetrade.ru
Types of Data Affected: Email addresses, Names, Passwords, Phone numbers, Dates of birth
The Online Trade Data Breach in September 2022 impacted the Russian e-commerce website, exposing 3.8 million customer records. The compromised data included email and IP addresses, names, phone numbers, dates of birth, and passwords stored as MD5 hashes.
Traderie.com
Types of Data Affected: Email addresses, Usernames, IP addresses, Social media profiles
The Traderie Data Breach, first reported in September 2022, affected nearly 365K users of the in-game trading marketplace owned by U.S.-based Akrew. The compromised data included email and IP addresses, usernames, and links to social media profiles. The breach extended to Akrew’s Nookazon website, a platform for trading items from the game Animal Crossing: New Horizons.
Clickasnap.com
Types of Data Affected: Email addresses, Usernames, Social media profiles, Passwords, Names, Physical addresses
The ClickASnap data breach involved the exposure of 3.3 million user records, including full names, email addresses, social media profiles, physical addresses, orders made, and passwords. Passwords for general site users were stored as SHA-512 hashes, while forum users' passwords were secured using bcrypt.
Flipkart.com
Types of Data Affected: Email addresses, Names, Phone numbers, Geographic locations
The Flipkart 2022 Data Breach incident, disclosed in September 2022, involved the leak of 552k customer records on a popular hacking forum. This breach exposed sensitive information, including email addresses, names, phone numbers, and geographic coordinates of customers.
Apk.tw
Types of Data Affected: Email addresses, Usernames, Passwords, IP addresses
APK.TW, a Taiwanese Android forum, experienced a data breach in September 2022, affecting 3.7 million members. This incident exposed usernames, email addresses, IP addresses, and passwords encrypted with salted MD5 hashes.
Getrevengeonyourex.com
Types of Data Affected: Names, Email addresses, IP addresses, Phone numbers, Passwords
GetRevengeOnYourEx.com suffered a data breach, resulting in the exposure of sensitive information on a private hacking forum. The breach revealed a database containing private details from over 80,000 individuals who had used the site's services to seek revenge on their ex-partners. This information includes intimate and sexual content, making the breach particularly sensitive.
Latestpilotjobs.com
Types of Data Affected: Email addresses, Names, Usernames, Passwords
Latest Pilot Jobs, an aviation-focused job listings website, suffered a data breach in August 2022 that later appeared on a popular hacking forum. The exposed dataset included 119k unique email addresses along with names, usernames, and unsalted MD5 password hashes.
Indihome.co.id
Types of Data Affected: Email addresses, Names, Geographic locations, Device information, Genders, IP addresses
IndiHome, an Indonesian telecommunications company, was reported to have been breached. This incident compromised over 12.6 million unique email addresses along with accompanying personal information such as names, IP addresses, genders, and geographic locations.
Wakanim.tv
Types of Data Affected: Usernames, Email addresses, Physical addresses, IP addresses, Geographic locations
Wakanim, a European streaming service owned by Sony, experienced a data breach that led to the alleged sale of user information on a data leak forum. The breach, involving approximately 6.7 million users, compromised account details such as usernames, email addresses, IP addresses, phone numbers, and more.
Tunedglobal.com
Types of Data Affected: Usernames, Passwords, Email addresses, IP addresses, Geographic locations
TunedGlobal was breached in 2016. The compromised data included passwords, phone numbers, email addresses, physical addresses, and names.
Tapfly.com
Types of Data Affected: Dates of birth, Names, Genders, Physical addresses, Phone numbers, Email addresses
TAP, Portugal's national airline, disclosed a cyberattack in which hackers accessed and published customers' personal data on the dark web in 2022. The stolen information includes names, nationalities, email and home addresses, phone contacts, and frequent flyer numbers.
Shitexpress.com
Types of Data Affected: Email addresses, Passwords, Names, Physical addresses, IP addresses
ShitExpress, a web service that allows users to send boxes of feces along with personalized messages, was breached in 2022 after a known threat actor exploited a vulnerability instead of reporting it. The entire database, including personal messages from customers, was downloaded and shared on a hacking forum. ShitExpress provides an anonymous platform for sending smelly surprises to annoy or prank others, ensuring complete anonymity for its customers.
Ggcorp.me
Types of Data Affected: Usernames, Passwords, Email addresses, IP addresses
GGCorp experienced a data breach in August 11, 2022, , and this incident was subsequently confirmed. The breach exposed sensitive data, including passwords, IP addresses, and email addresses.
Brandnewtube.com
Types of Data Affected: Usernames, Email addresses, IP addresses, Private messages
The streaming website Brand New Tube was breached, impacting almost 350,000 subscribers. The data breach revealed personal information including email and IP addresses, usernames, genders, passwords stored as unsalted SHA-1 hashes, and private messages.
Bookcrossing.com
Types of Data Affected: Email addresses, Usernames, Passwords, Names, IP addresses, Dates of birth, Geographic locations
BookCrossing, a prominent social networking site for book enthusiasts, confirmed a data breach in August 2022. The breach was associated with a database backup from November 2012, showcasing the potential longevity and delayed discovery of some breaches. This intrusion exposed data related to nearly 1.6 million accounts. Specific details that were compromised included names, usernames, email and IP addresses, dates of birth, and, most concerningly, passwords that were stored in plain text.
Adoptmetradingvalues.com
Types of Data Affected: Email addresses, Passwords, Usernames, IP addresses
The Adopt Me Trading Values Data Breach in July 2022 affected the website used for assessing pet trade values in the "Adopt Me!" Roblox game. This incident exposed 86K unique email addresses, along with usernames, IP addresses, and bcrypt password hashes.
Exvagos.org
Types of Data Affected: Email addresses, Usernames, Dates of birth, IP addresses, Passwords
The Exvagos data breach involved the exposure of personal information for 2.1 million members of the direct download community ExVagos. This breach disclosed usernames, email addresses, dates of birth, IP addresses, and passwords, which were stored as MD5 hashes.
Memechat.app
Types of Data Affected: Email addresses, Usernames
MemeChat endured a breach in 2022, exposing 7.4 million records, which included 4.5 million unique email addresses and usernames.
Sayweee.com
Types of Data Affected: Names, Email addresses, Phone numbers
Weee experienced a data breach in 2022. The data compromised in this breach included phone numbers, email addresses, and information related to delivery instructions, names, and purchases.
Ogusers.com
Types of Data Affected: Usernames, Email addresses, IP addresses, Passwords
The forum OGUsers suffered a data breach, which was the fifth incident since December 2018. The breach compromised usernames, email and IP addresses, along with passwords stored as argon2 hashes, affecting a total of 528k unique email addresses.
Lapostemobile.fr
Types of Data Affected: Email addresses, Phone numbers, Physical addresses
La Poste Mobile, a French mobile phone network, had a data breach because of data breach in 2021.La Poste Mobile has stated that customer data may have been accessed, particularly files stored on the computers of its employees.
Hjedd.com
Types of Data Affected: Usernames, Email addresses, Passwords, IP addresses
Hjedd, a Chinese-based adult platform had a data breach in 2022, was found to have a leaky database that exposed sensitive data linked to more than 13 million user accounts. The breach involved over 24 GB of files containing user information, with the server updating this data every second, indicating a continuous and substantial risk to user privacy.
Diskunion.net
Types of Data Affected: Email addresses, Names, Usernames, Passwords, Phone numbers, Geographic locations
The Disk Union Data Breach in June 2022 affected the Japanese record chain store, exposing 775K unique email addresses along with names, post codes, phone numbers, and plain text passwords.
Tnaflix.com
Types of Data Affected: Email addresses, Usernames, Passwords, IP addresses
TNAFlix Data Breach in June 2022 involved the adult website experiencing a significant security incident where 1.4 million records were compromised. This data, which included email and IP addresses, usernames, and passwords in plain text, was later posted on a hacking forum.
Altenens.is
Types of Data Affected: Email addresses, Usernames, Passwords
Altenen Data Breach in June 2022 impacted the notorious "carding" website, which is associated with credit card fraud. This breach resulted in the exposure of 1.3 million unique email addresses, usernames, bcrypt password hashes, and cryptocurrency wallet addresses.
Ctars.com.au
Types of Data Affected: Usernames, Names, Email addresses, Passwords, Genders, Phone numbers, Dates of birth
NDIS (National Disability Insurance Scheme) faced a data breach in May 2022, with details subsequently posted on an online hacking forum. The breach impacted the CTARS cloud platform used by care providers to document NDIS participant details, often containing sensitive medical data. The breach affected over 67k unique email addresses and included physical addresses, names, dates of birth, phone numbers, along with patient treatment and condition data.
Wiredbucks.com
Types of Data Affected: Email addresses, Names, Passwords, Usernames, IP addresses, Physical addresses
The WiredBucks Data Breach in May 2022 exposed over 900,000 email and IP addresses along with names, usernames, earnings via the platform, physical addresses, and passwords stored in plain text.
Amartfurniture.com.au
Types of Data Affected: Names, Email addresses, Passwords, Phone numbers, Physical addresses
AmartFurniture experienced a data leak on 2022, compromising 108,977 accounts. The breached data included email addresses, names, passwords, phone numbers, and physical addresses.
Gemotest.ru
Types of Data Affected: Email addresses, Names, Dates of birth, Genders, Government issued IDs, Passport numbers, Physical addresses
Gemotest, a Russian pharmaceutical company, suffered a breach in April 2022 that exposed 31M patient records, including 6.3M unique email addresses along with names, physical addresses, dates of birth, and passport and insurance numbers.
Epal.gg
Types of Data Affected: Email addresses, Usernames
E-Pal, a service centered around assisting users in locating friends on the Discord platform, announced a significant data breach in October 2022. This breach led to the unauthorized access and release of data related to over 100,000 unique users. Specifically, affected data contained email addresses and usernames. It was observed that these details were connected to nearly 1 million orders made on the platform.
Vivaair.com
Types of Data Affected: Email addresses, Phone numbers, Names, Physical addresses, IP addresses
Viva Air, a Colombian airline that is no longer in operation, experienced a data breach in March 2022. During this incident, hackers accessed and ransomed a variety of data, including records of 2.6 million transactions. The exposed information included 932,000 unique email addresses, along with physical and IP addresses, names, and phone numbers.
Payhere.lk
Types of Data Affected: Email addresses, Phone numbers, Names, Physical addresses
PayHere, a fintech company based in Sri Lanka, experienced a cyber attack in april 2022 resulting in a 36-hour service outage exposing over 1.5 million payment records, including IP and physical addresses, names, phone numbers, purchase histories, and partially obfuscated credit card data.
Nvidia.com
Types of Data Affected: Email addresses, Passwords
NVIDIA faced a data breach in February 2022, impacting over 70k employees. The breach exposed employee email addresses and NTLM password hashes. Many of these hashes were later decrypted and shared among hackers.
Givesendgo.com
Types of Data Affected: Email addresses, Names, IP addresses, Geographic locations
GiveSendGo, a Christian crowdfunding platform, was compromised in early 2022, exposing donor information including names, email addresses, postcodes, donation amounts, and messages left during the donation process, affecting a significant number of users including approximately 90k donors to the Canadian "Freedom Convoy" campaign.
Twitter.com
Types of Data Affected: Usernames, Names, Email addresses, Phone numbers, Geographic locations
The Twitter API Vulnerability Data Breach in 2021 exposed over 5.4 million user records by exploiting a flaw that allowed attackers to input phone numbers and email addresses to retrieve associated Twitter IDs. The leaked data included both public and private information such as names, login names, locations, verified status, phone numbers, and email addresses.
Leakedreality.com
Types of Data Affected: Usernames, Email addresses, Passwords, IP addresses
The uncensored video platform, Leaked Reality, which has since ceased operations, was hit by a significant data breach in January 2022. The breach compromised the personal details of approximately 115,000 individuals. Exposed data included usernames, IP addresses, and unique email addresses.
Doxbin.org
Types of Data Affected: Email addresses, Usernames, Passwords
Doxbin, a doxing website, was compromised in 2013, exposing user data before the site was taken offline following the breach and subsequent law enforcement action.
Flexbooker.com
Types of Data Affected: Names, Email addresses, Passwords, Phone numbers
The FlexBooker data breach occurred in 2021 and impacted 3.7 million subscribers. The breached data included user names, email addresses and salted password hashes.
Abfrl.com
Types of Data Affected: Names, Email addresses, Passwords, Phone numbers, Physical addresses, Religions, Marital statuses, Genders, Income levels
Aditya Birla Fashion and Retail Ltd (ABFRL) had a data breach incident on its portal where over 5.4 million email addresses were exposed online. The breach includes personal customer information, such as names, phone numbers, addresses, dates of birth, order histories, credit card details, and employee details, including salary information.
Travelio.com
Types of Data Affected: Email addresses, Names, Passwords, Phone numbers
Travelio, a prominent Indonesian real estate website, fell victim to a significant data breach in November 2021. This breach laid bare the personal details of more than 470,000 customers. Exposed data encompassed various sensitive pieces of information including email addresses, names, hashed passwords, and phone numbers.
Stripchat.com
Types of Data Affected: Usernames, Email addresses, IP addresses
Stripchat Data Breach - a database containing sensitive information from users and models of the adult cam site Stripchat was found online without protection. The exposed database included 200 million records, including user data and transaction details, however a small slice of 10million users were leaked publicly later.
Robinhood.com
Types of Data Affected: Email addresses
A data breach was reported at Robinhood in 2021, a popular online brokerage firm. The company reported that a total of million customer accounts were affected by the breach. The data that was compromised includes names, email addresses, and home addresses. The data breach happened due to a security incident at a third-party vendor that Robinhood uses for its customer support.
Btc-alpha.com
Types of Data Affected: Email addresses, IP addresses, Passwords, Usernames
The BTC-Alpha breach in 2021 involved a ransomware attack attributed to the Lockbit group. The company CEO, Vitalii Bodnar, raised suspicions that a competitor might be involved. The attack led to the compromise of hashed passwords of an undisclosed number of users.
Animeify.net
Types of Data Affected: Email addresses, Names, Usernames, Passwords, Genders
The Animeify data breach in October 2021 exposed 808k unique email addresses along with names, usernames, genders, and plain text passwords. The Arabic-language anime website has since been discontinued.
Protemps.com.sg
Types of Data Affected: Email addresses, Names, Passwords, Genders, Nationalities, Religions
The Protemps Data Breach in October 2021 exposed detailed information of nearly 50,000 job seekers from the Singaporean recruitment website. The compromised data includes names, email and physical addresses, phone numbers, passport numbers, and passwords stored as unsalted MD5 hashes, along with other sensitive jobseeker information.
Jukinmedia.com
Types of Data Affected: Email addresses, Passwords, Names, IP addresses
Jukin Media, a digital media company, was allegedly breached in 2021, with databases, Jenkins data, invoices, and other internal information reportedly accessed and later offered for sale online.
Coinmarketcap.com
Types of Data Affected: Email addresses
CoinMarketCap, a cryptocurrency price-tracking website, suffered a breach in 2021 that exposed over 3.1 million email addresses. The company stated that the leak did not come from their own servers and confirmed that no passwords were included in the leak.
Denniskirk.com
Types of Data Affected: Email addresses, Names, Phone numbers, Geographic locations
The Dennis Kirk Data Breach in October 2024 involved the circulation of data containing 1.13 million unique email addresses from the motorcycle supplies store. Dating back to September 2021, the exposed data included detailed purchase records from the online store, along with customer names, phone numbers, and postcodes.
Epik.com
Types of Data Affected: Email addresses, Passwords, IP addresses
Epik, a domain registrar and web hosting company, suffered a data breach in 2021. The breach, exposed over 15 million unique email addresses, domain history, purchase records, credit card information, internal company emails, and other data. Epik's services to far-right and extremist websites highlighted the significance of this breach.
Havefunteaching.com
Types of Data Affected: Email addresses, Names, Physical addresses, Browser user agent details
The Have Fun Teaching Data Breach in August 2021 exposed 80K WooCommerce transactions, including 27K unique email addresses. The leaked data also included physical and IP addresses, names, payment methods, and details of items purchased.
Bvdinfo.com
Types of Data Affected: Email addresses, Names, Physical addresses, Phone numbers, Dates of birth
The Bureau van Dijk Orbis Data Breach in August 2021 led to the publication of hundreds of gigabytes of business data originally compiled from public sources. This extensive dataset, which was published on a popular hacking forum, contained comprehensive information on millions of corporate entities and individuals, including personal details such as names, dates of birth, 28 million unique email addresses, corporate physical addresses, phone numbers, and job titles. Importantly, the data breach did not result from unauthorized access to Bureau van Dijk’s systems, nor did it involve client data directly from BvD or its parent company, Moody's.
Types of Data Affected: Email addresses, Dates of birth, Names, Phone numbers, Physical addresses
The speculated 2021 AT&T Data Breach refers to claims of 71 million customer records being leaked. AT&T denies these records came from their systems, citing a lack of evidence for a breach. However, some of the data has been verified as accurate, implicating it may concern AT&T customers. The precise origin of the data is still uncertain, with AT&T indicating it might not have directly originated from their databases.
Habibs.com.br
Types of Data Affected: Email addresses, Names, Phone numbers, Dates of birth, IP addresses
Habib's, a Brazilian fast food restaurant, experienced a significant data breach in August 2021, that impacted 3.5 million users, revealing personal information like email addresses, IP addresses, names, phone numbers, and dates of birth, along with CPF numbers and social media profile links.
Imavex.com
Types of Data Affected: Names, Email addresses, Usernames, Passwords, Genders, Phone numbers, Physical addresses
Imavex experienced a data breach in August 2021 that exposed 878 thousand unique email addresses. User records containing names, usernames, and password information were compromised, with some records also revealing genders and partial credit card details, including the card's last 4 digits and expiration date. Additionally, hundreds of thousands of form submissions and orders from Imavex customers were disclosed, revealing further personal details of the submitters and the content of the forms.
Datpiff.com
Types of Data Affected: Usernames, Email addresses, Passwords, Security questions and answers
DatPiff, a mixtape hosting service, suffered a data breach that was publicly revealed in 2021. The breach exposed 7.5 million member records, including email addresses, usernames, passwords, and security questions. The passwords, hashed using the outdated and insecure MD5 algorithm, were later dehashed and made available in plain text. The breach is believed to have occurred via a website vulnerability scanner that allowed threat actors access to an old server with database backup.
Qraved.com
Types of Data Affected: Email addresses, Names, Passwords, Phone numbers, Dates of birth
The Qraved Data Breach in July 2021 impacted the Indonesian restaurant website and exposed nearly 1 million unique email addresses. The compromised data included names, phone numbers, dates of birth, and passwords stored as MD5 hashes, and was later redistributed on a hacking forum.
Jamtangan.com
Types of Data Affected: Email addresses, Passwords, Phone numbers, IP addresses, Names
JamTangan, an online platform, reported a data breach on July, 2021. The breach included a wide range of personal data such as passwords, IP addresses, phone numbers, email addresses, and physical addresses.
Guntrader.uk
Types of Data Affected: Physical addresses, Email addresses, Genders, IP addresses, Phone numbers, Passwords
Guntrader, a platform for firearm trading, was breached in 2021. The breach led to the exposure of various types of user information, including passwords, IP addresses, phone numbers, email addresses, and physical addresses. Additionally, browser user agent details, geographic locations, names, and salutations of the users were compromised.
Eccie.net
Types of Data Affected: Usernames, Email addresses, Passwords, IP addresses, Dates of birth
The adult escort forum ECCIE experienced a data breach in January 2021. The breach involved the exposure of 536,000 user records containing email addresses, IP addresses, usernames, dates of birth, and salted MD5 password hashes.
Androidlista.com
Types of Data Affected: Email addresses, Usernames, Passwords, Names
AndroidLista, a platform for reviewing Android applications and games, suffered a data breach in July 2021.The breached data included email addresses, names, usernames, and passwords, which were stored as salted SHA-1 hashes.
Heatgames.me
Types of Data Affected: Email addresses, Passwords, IP addresses, Geographic locations
The HeatGames Data Breach in June 2021 resulted in the exposure of almost 650,000 unique email addresses along with IP addresses, geographical locations, and passwords stored as salted MD5 hashes.
Short-edition.com
Types of Data Affected: Email addresses, Passwords, Phone numbers, Usernames, Physical addresses, Dates of birth
The Short Édition Data Breach in June 2021 affected the French publishing house, exposing 505K records. The compromised data included email and physical addresses, names, usernames, phone numbers, dates of birth, genders, and passwords, which were secured with either salted SHA-1 or salted SHA-512 hashes.
Limevpn.com
Types of Data Affected: Email addresses, Names, Passwords, IP addresses, Phone numbers, Physical addresses
LimeVPN, a VPN service provider, experienced a data breach where a hacker claimed to have stolen records of about 69,400 users. The stolen data included usernames, plain text passwords, IP addresses, billing info, and even public and private encryption keys used by LimeVPN users.
Paragoncheats.com
Types of Data Affected: Usernames, Email addresses, IP addresses, Browsers
Paragon Cheats, a website dedicated to providing cheats for Grand Theft Auto Online, experienced a substantial breach in May 2021. As a consequence of the breach, the service was shut down. The breach led to the exposure of 188,000 customer records which included details such as usernames, email addresses, and IP addresses.
Indiamart.com
Types of Data Affected: Names, Email addresses, Physical addresses, Phone numbers
The online B2B marketplace, IndiaMART, experienced a data breach in 2021. The breach affected several types of user data, including phone numbers, email addresses, physical addresses, and names.
Upstox.com
Types of Data Affected: Email addresses, Usernames, Dates of birth, Government IDs, Nationalities, Occupations, Phone numbers, Passwords
Upstox suffered a data breach in 2021. The compromised data included government-issued IDs, passwords, bank account numbers, phone numbers, email addresses, dates of birth, physical addresses, and personal details such as family members' names, genders, income levels, marital statuses, nationalities, and occupations.
Slideteam.net
Types of Data Affected: Names, Email addresses, Passwords
SlideTeam, a presentation template platform, was compromised in 2022, with 1.4M records later appearing on a hacking forum. The exposed data included names, email addresses, and salted password hashes, with the breach believed to have originated from a vulnerable Magento instance.
Sirhurt.net
Types of Data Affected: Email addresses, Passwords, Usernames, IP addresses
A significant data breach affected SirHurt, a website known for offering cheats for the popular game Roblox. The breach exposed the personal details of more than 90,000 customers. Compromised data encompassed email and IP addresses, usernames, and passwords, which were unfortunately stored using the vulnerable MD5 hashing algorithm.
Phonehouse.es
Types of Data Affected: Email addresses, Names, Physical addresses, Geographic locations, Phone numbers, Dates of birth
PhoneHouse, a leading European mobile phone retailer, experienced a data breach in 2021. The breach resulted in the theft of sensitive customer information, including personal details and contract-related data.
Ogusers.com
Types of Data Affected: Usernames, Email addresses, IP addresses, Passwords
The notorious forum, OGusers, which is known for its involvement in account hijacking and SIM swapping, experienced its fourth significant data breach since December 2018. This breach, once discovered, was promptly sold on a competing hacking forum. This compromised data contained usernames, email addresses, IP addresses, and passwords. The passwords were stored in a combination of two formats, either as salted MD5 or the more secure argon2 hashing algorithm. The aftermath revealed that as many as 348,000 unique email addresses were caught up in this breach.
Atmeltomo.com
Types of Data Affected: Email addresses, Passwords, Usernames, IP addresses
Popular Japanese e-mail friend search site Atmeltomo suffered a data breach. The breach resulted in the exposure of 1.3 million records, including 580,000 unique email addresses. The compromised data also included usernames, IP addresses, and passwords stored as unsalted MD5 hashes.
Kinokong.org
Types of Data Affected: Email addresses, Names, Usernames, Passwords, IP addresses
KinoKong, a Russian online streaming service, suffered a data breach in March 2021 that was later redistributed in a popular hacking forum. The breach exposed over 829k unique email addresses along with names, usernames, IP addresses and MD5 password hashes.
Liker.com
Types of Data Affected: Email addresses, IP addresses, Passwords, Security questions and answers, Usernames, Dates of birth, Phone numbers, Geographic locations
Liker, a social network, experienced a data breach in March 2020. Approximately 465,000 email addresses, names, birthdates, education levels, private messages, security Q&A in plain text, and bcrypt hashed passwords were exposed. The breach was reportedly in retaliation for other data breaches.
Weleakinfo.com
Types of Data Affected: Email addresses, Names, Physical addresses, Dates of birth, Browser user agent details
WeLeakInfo's Stripe account was compromised in March 2021, by obtaining access through an expired domain name linked to the account's management email. This exposed nearly 12k unique email addresses of customers who had made payments to access data on WeLeakInfo. The subsequent public leak included names, payment histories, IP addresses, billing addresses, partial credit card details, and the affiliated purchasing organization.
Parkmobile.io
Types of Data Affected: Names, Email addresses, Passwords, Phone numbers, Genders, Physical addresses, Licence plates
ParkMobile, a US-based mobile parking app, experienced a data breach in March 2021. The company reported that a third-party software used by ParkMobile was breached, leading to the exposure of customer data such as license plate numbers, email addresses, phone numbers, and encrypted passwords. The breach affected approximately 20 million users.
Luxottica.com
Types of Data Affected: Names, Physical addresses, Email addresses, Phone numbers
A significant data breach impacted Luxottica, the world's leading eyewear company, jeopardizing the personal details of over 70 million individuals. Originating from a partner, the breach culminated in the sale of the stolen data on a hacking forum towards the end of 2022. The compromised data encompassed email and physical addresses, names, genders, dates of birth, and phone numbers. Responding to the incident, Luxottica issued a statement acknowledging their awareness of the breach .
Idcgames.com
Types of Data Affected: Email addresses, Usernames, Passwords, IP addresses
IDCGames is a Spanish online gaming platform that suffered a data breach in 2021. The breach was caused by an unsecured Elasticsearch database that exposed over around 4 million user records, including email addresses, usernames, passwords, and IP addresses. The company has confirmed that no financial information was compromised.
Descomplica.com.br
Types of Data Affected: Email addresses, Passwords
The Brazilian EdTech company Descomplica suffered a data breach in 2021, which was later posted on a well-known hacking forum. The breach led to the exposure of almost 4.8 million accounts, including email addresses, names, partial credit card data, purchase histories, and password hashes.
Cardmafia.cc
Types of Data Affected: IP addresses, Email addresses, Passwords, Usernames, Social media profiles
The CardingMafia data breach occurred on a popular carding site in 2021 and led to the exposure of personal information of 297,744 users. The exposed data included email addresses, hashed passwords, usernames, and IP addresses.
Ticketcounter.nl
Types of Data Affected: Names, Email addresses, Phone numbers, Physical addresses, Dates of birth, Genders, IP addresses
European e-ticketing platform Ticketcounter got caught in a data breach exposing more than 1.9 million user records. Exposed data includes full names, email addresses, phone numbers, IP addresses, and hashed passwords.
Gemplex.tv
Types of Data Affected: Email addresses, Names, Phone numbers, Device information
Gemplex, an Indian streaming platform, experienced a significant data breach in February 2021, . This incident led to the exposure of various personal data, including email addresses, names, phone numbers, and device information of the affected users.
Komplettfritid.no
Types of Data Affected: Names, Email addresses, Passwords, Physical addresses, IP addresses
The Norwegian online store, KomplettFritid, experienced a significant data breach that affected 140k customers. Exposed information encompassed full names, email, IP and physical addresses, phone numbers, and passwords. The majority of these passwords were encrypted using bcrypt hashes, but a small portion was found in plain text.
Citybee.lt
Types of Data Affected: Email addresses, Passwords, Names
Lithuanian car sharing service CityBee got its data breached and eposed 110,000 user records. Exposed data includes emails, phone numbers, personal codes, and enciphered passwords.
Devil-torrents.pl
Types of Data Affected: Email addresses, Passwords
The Devil-Torrents.pl Data Breach in early 2021 affected the Polish torrents website, exposing a subset of data that included 63K unique email addresses and cracked passwords. This compromised information was later circulated on a popular data breach sharing platform.
Datehotbrunettes.com
Types of Data Affected: Email addresses, Usernames, Passwords, IP addresses
The Date Hot Brunettes Data Breach in January 2021 resulted in the exposure of sensitive user data from the now-defunct dating website. The breach compromised 1.5 million unique email addresses along with associated IP addresses, usernames, user-entered bios, and passwords stored as MD5 hashes.
Oxfam.org.au
Types of Data Affected: Names, Email addresses, Genders, Physical addresses, Phone numbers, Dates of birth
Oxfam Australia reported a data breach that occurred in 2021. The breach involved an unauthorized third party accessing an email account of an Oxfam staff member, potentially compromising personal information of individuals who interacted with the charity. The compromised data may have included names, email addresses, phone numbers, donation amounts, and Oxfam event participation records of more than 1.8 million users.
Wedmegood.com
Types of Data Affected: Names, Passwords, Email addresses, Genders, Physical addresses
WedMeGood suffered a data breach in 2021. The breach led to the exposure of customer passwords, phone numbers, email addresses, physical addresses, as well as gender and name information.
Twitter.com
Types of Data Affected: Usernames, Email addresses, Names, Geographic locations, Profile photos, Phone numbers
The "Twitter Email Addresses Leak" involves a data leak of over 200 million Twitter user profiles around 2021. The leak includes email addresses, names, screen names, follower counts, and account creation dates. The data was obtained through a Twitter API vulnerability that allowed the input of email addresses and phone numbers to confirm their association with Twitter IDs.
Guns.com
Types of Data Affected: Names, Email addresses, Phone numbers, Passwords, Physical addresses, Dates of birth
Guns.com, an online firearms retailer, experienced a data breach in 2021 when a hacker temporarily disabled the website. While Guns.com initially claimed there was no indication of data theft, a recent data dump on the dark web suggests otherwise. The leaked files include substantial gun buyer information such as user IDs, full names, email addresses, phone numbers, hashed passwords, and physical addresses. The data also reveals access to information about firearms providers who sell through the platform.
Ducks.org
Types of Data Affected: Names, Email addresses, Passwords, Physical addresses, Phone numbers
Ducks Unlimited had a data breach on 2021. The data compromised in the breach included passwords, phone numbers, email addresses, dates of birth, physical addresses, and names.
Dailyquiz.me
Types of Data Affected: Usernames, Email addresses, IP addresses, Passwords
Daily Quiz, a popular quiz app, reportedly experienced a data breach in 2021. The breach exposed the personal information of approximately 8 million users, including usernames, email addresses, and hashed passwords. The passwords were reportedly hashed using the bcrypt algorithm, which is considered to be a strong encryption method.
Bdv.fr
Types of Data Affected: Usernames, Email addresses, Passwords, Names, Phone numbers, Physical addresses
Bourse des Vols, a French online travel agency, was compromised in 2021, exposing the personal information of more than 700k customers including names, email addresses, phone numbers, and dates of birth.
Bookchor.com
Types of Data Affected: Names, Email addresses, Passwords, IP addresses, Phone numbers, Physical addresses,
The online book marketplace Bookchor suffered a data breach, affecting around 500,000 accounts. The exposed data included email and IP addresses, names, genders, dates of birth, phone numbers, and unsalted MD5 password hashes.
Adecco.com
Types of Data Affected: Names, Usernames, Geographic locations, Email addresses, IP addresses, Passwords
Adecco, a well-known staffing agency, experienced a data breach on January 3, 2021. The compromised data included passwords, phone numbers, email addresses, as well as personal details such as genders, geographic locations, marital statuses, and names.
Universityofcalifornia.edu
Types of Data Affected: Email addresses, Names, Dates of birth, Phone numbers, Genders, Physical addresses, Social security numbers
The University of California Data Breach in December 2020 occurred due to a vulnerability in third-party provider Accellion. The incident exposed data on both students and staff, including 503K unique email addresses, along with names, dates of birth, genders, social security numbers, ethnicities, and various academic-related attributes.
Gamingmonk.com
Types of Data Affected: Email addresses, Names, Passwords, Usernames, Dates of birth, Phone numbers
GamingMonk, which is recognized as India's "largest esports community" and has since been acquired by MPL Esports, experienced a data breach. This incident compromised the personal data of 655,000 users, including unique email addresses, names, usernames, phone numbers, dates of birth, and bcrypt password hashes.
Travelok.com
Types of Data Affected: Names, Email addresses, Dates of birth, Genders
The Oklahoma state Tourism and Recreation Department underwent a data breach, compromising more han 630k email addresses. These addresses were distributed across multiple tables, with age ranges linked to brochure orders and birth dates linked to contest entries. Additionally, the breach disclosed genders, names, and physical addresses of individuals.
Peoplesenergy.co.uk
Types of Data Affected: Email addresses, Passwords, Names, Physical addresses, Phone numbers
UK energy firm People's Energy reported a data breach that affected all its 270,000 current customers. The breach resulted in the theft of an entire customer database, including names, addresses, dates of birth, phone numbers, tariff details, and energy meter IDs. Although financial information was not accessed for most customers, 15 small-business customers had their bank account details compromised.
Mmgfusion.com
Types of Data Affected: Names, Passwords, Email addresses, Genders, Marital statuses, Phone numbers, Physical addresses
MMG Fusion, a company providing technology solutions for dental practices, experienced a targeted cyberattack in 2013 resulting in the destruction of their databases and a breach of stored information. The compromised data included names, phone numbers, and email addresses of end-users, but no financial information was accessed.
Drivesure.com
Types of Data Affected: Email addresses, Passwords, Phone numbers, Physical addresses, Names
DriveSure suffered a data breach on 2020. The breach resulted in the exposure of passwords, phone numbers, email addresses, physical addresses, names, and vehicle details.
Capitaleconomics.com
Types of Data Affected: Email addresses, Passwords, Names, Phone numbers, Physical addresses, Employers
The economic research firm, Capital Economics, experienced a data breach, revealing customer records. The breach led to the exposure of email and physical addresses, names, phone numbers, job titles, and the employers of the affected customers.
Part of this list comes from the public API at: https://xposedornot.com