XposedOrNot
banner
xposedornot.bsky.social
XposedOrNot
@xposedornot.bsky.social
Un-official handle of XON. Created and maintained by @DevaonBreaches
XposedOrNot += FreeOnes Data Breach

The FreeOnes #databreach in February 2017 exposed 960K unique email addresses alongside usernames, IP addresses, and passwords stored as salted MD5 hashes.
November 9, 2025 at 1:54 PM
XposedOrNot += TISZA Data Breach

The TISZA #databreach in late October 2025 affected the Hungarian political party after data from its TISZA Világ service was published online. The incident exposed 200K personal records, including email addresses, names, phone numbers, and physical addresses.
November 9, 2025 at 12:49 AM
XposedOrNot += Hello Cake Data Breach

The Hello Cake #databreach in July 2025 affected the sexual healthcare product maker, with the data later posted to a public hacking forum. The incident exposed 23K unique email addresses along with names, phone numbers, physical addresses, and dates of birth.
November 6, 2025 at 6:26 AM
XposedOrNot += Disk Union Data Breach

The Disk Union #databreach in June 2022 affected the Japanese record chain store, exposing 690K unique email addresses along with names, post codes, phone numbers, and plain text passwords.
October 30, 2025 at 2:45 AM
XposedOrNot += MyVidster Data Breach

The MyVidster #databreach in October 2025 affected the video-sharing platform, with the leaked data later posted on a public hacking forum. The incident exposed information of nearly 4M users, including usernames and email addresses.
October 27, 2025 at 11:55 AM
XposedOrNot += Free Data Breach

The Free #databreach in October 2024 affected the French ISP, exposing 14.2M unique email addresses along with names, physical addresses, phone numbers, genders, dates of birth, and, for many users, bank account numbers.
October 22, 2025 at 7:10 AM
XposedOrNot += Miljödata Data Breach

The Miljödata #databreach in August 2025 in exposing 870K unique email addresses across multiple compromised files, along with names, phone numbers, physical addresses, dates of birth, and government-issued personal identity numbers.
October 15, 2025 at 12:38 PM
XposedOrNot += Vietnam Airlines Data Breach

The Vietnam Airlines #databreach, part of a wider incident in October 2025, exposed 7.5M unique customer email addresses following a breach of the airline’s Salesforce, compromising data also included names, phone numbers, and dates of birth.
October 12, 2025 at 5:46 AM
XposedOrNot += HomeRefill Data Breach

The HomeRefill #databreach in April 2020 affected the Brazilian e-commerce platform, exposing 190K unique email addresses along with names, phone numbers, dates of birth, and salted password hashes.
October 7, 2025 at 2:17 AM
XposedOrNot += WiredBucks Data Breach

The WiredBucks #databreach in May 2022 exposed over 926K email and IP addresses along with names, usernames, earnings via the platform, physical addresses, and passwords stored in plain text.
October 4, 2025 at 4:42 AM
XposedOrNot += MaReads Data Breach

The MaReads #databreach in June 2025 affected the Thai-language fiction and comics platform, exposing 75K records. The compromised data included usernames, email addresses, phone numbers, and dates of birth.
October 3, 2025 at 7:50 AM
XposedOrNot += Fédération Française de Rugby Data Breach

The Fédération Française de Rugby #databreach in June 2023 exposed 282K unique email addresses along with names, dates of birth, and phone numbers.
October 1, 2025 at 4:30 AM
XposedOrNot += Animeify Data Breach

The Animeify #databreach in October 2021 exposed 808K unique email addresses along with names, usernames, genders, and plain-text passwords. The Arabic-language anime website has since been discontinued.
September 28, 2025 at 2:39 PM
XposedOrNot += Bouygues Telecom Data Breach

The Bouygues Telecom #databreach in August 2025 exposed almost 6.4M customer records, including 5.7M unique email addresses, along with names, physical addresses, phone numbers, and dates of birth.
September 27, 2025 at 4:54 AM
XposedOrNot += University of California Data Breach

The University of California #databreach in December 2020 occurred due to a vulnerability in third-party provider Accellion. The incident exposed data on both students and staff, including 503K unique email addresses and more.
September 9, 2025 at 6:37 AM
XposedOrNot += Unigame Data Breach

The Unigame #databreach in December 2019, involving the former gaming website and maker of Hunter Online, exposed 844K email addresses along with salted MD5 password hashes.
August 11, 2025 at 1:24 PM
XposedOrNot += Roblox Developer Conference Registration Platform Data Breach

The Roblox Developer Conference Registration Platform #databreach in July 2024 exposed 10K unique email addresses, along with names and IP addresses.
August 11, 2025 at 1:20 PM
XposedOrNot += Have Fun Teaching Data Breach

The Have Fun Teaching #databreach in August 2021 exposed 80K WooCommerce transactions, including 27K unique email addresses. The leaked data also included physical and IP addresses, names, payment methods, and details of items purchased.
July 31, 2025 at 10:15 AM
XposedOrNot += OnRPG Data Breach

The OnRPG #databreach in July 2016 exposed just over 1M email and IP addresses, along with usernames and passwords stored as salted MD5 hashes.

Exposed data: Email addresses, IP addresses, Usernames, Salted MD5 hash passwords
July 29, 2025 at 2:08 AM
XposedOrNot += Naz.API Combo List

The Naz.API #databreach combo list released in September 2023 involved the publication of over 100GB of stealer logs and credential stuffing lists on a popular hacking forum exposing 71 million emails and credentials.
May 10, 2025 at 2:08 PM
XposedOrNot += Devil-Torrents.pl Data Breach

The Devil-Torrents.pl #databreach in early 2021 affected the Polish torrents website, exposing a subset of data that included 63K unique email addresses and cracked passwords.
April 23, 2025 at 11:14 PM
XposedOrNot += Online Trade Data Breach

The Online Trade #databreach in September 2022 impacted the Russian e-commerce website, exposing 3.8M customer records. The compromised data included email and IP addresses, names, phone numbers, dates of birth, and passwords stored as MD5 hashes.
April 23, 2025 at 11:10 PM
XposedOrNot += Samsung Germany Data Breach

The Samsung Germany #databreach in March 2025 occurred via a compromise of their logistics provider, Spectos, reportedly caused by malware on an employee’s device exposing 218K unique email addresses, names, and physical addresses.
April 13, 2025 at 11:00 AM
XposedOrNot += 9Lives Data Breach

The 9Lives #databreach in October 2014 affected the Belgian gaming news forum, exposing 109K unique email addresses along with usernames and salted MD5 password hashes.
April 11, 2025 at 9:29 AM
XposedOrNot += Twitter Data Breach

The Twitter API Vulnerability #databreach in 2021 exposed over 5.4M user records by exploiting a flaw that allowed attackers to input phone numbers and email addresses to retrieve associated Twitter IDs.
April 11, 2025 at 9:22 AM