The FreeOnes #databreach in February 2017 exposed 960K unique email addresses alongside usernames, IP addresses, and passwords stored as salted MD5 hashes.
The FreeOnes #databreach in February 2017 exposed 960K unique email addresses alongside usernames, IP addresses, and passwords stored as salted MD5 hashes.
The TISZA #databreach in late October 2025 affected the Hungarian political party after data from its TISZA Világ service was published online. The incident exposed 200K personal records, including email addresses, names, phone numbers, and physical addresses.
The TISZA #databreach in late October 2025 affected the Hungarian political party after data from its TISZA Világ service was published online. The incident exposed 200K personal records, including email addresses, names, phone numbers, and physical addresses.
The Hello Cake #databreach in July 2025 affected the sexual healthcare product maker, with the data later posted to a public hacking forum. The incident exposed 23K unique email addresses along with names, phone numbers, physical addresses, and dates of birth.
The Hello Cake #databreach in July 2025 affected the sexual healthcare product maker, with the data later posted to a public hacking forum. The incident exposed 23K unique email addresses along with names, phone numbers, physical addresses, and dates of birth.
The Disk Union #databreach in June 2022 affected the Japanese record chain store, exposing 690K unique email addresses along with names, post codes, phone numbers, and plain text passwords.
The Disk Union #databreach in June 2022 affected the Japanese record chain store, exposing 690K unique email addresses along with names, post codes, phone numbers, and plain text passwords.
The MyVidster #databreach in October 2025 affected the video-sharing platform, with the leaked data later posted on a public hacking forum. The incident exposed information of nearly 4M users, including usernames and email addresses.
The MyVidster #databreach in October 2025 affected the video-sharing platform, with the leaked data later posted on a public hacking forum. The incident exposed information of nearly 4M users, including usernames and email addresses.
The Free #databreach in October 2024 affected the French ISP, exposing 14.2M unique email addresses along with names, physical addresses, phone numbers, genders, dates of birth, and, for many users, bank account numbers.
The Free #databreach in October 2024 affected the French ISP, exposing 14.2M unique email addresses along with names, physical addresses, phone numbers, genders, dates of birth, and, for many users, bank account numbers.
The Miljödata #databreach in August 2025 in exposing 870K unique email addresses across multiple compromised files, along with names, phone numbers, physical addresses, dates of birth, and government-issued personal identity numbers.
The Miljödata #databreach in August 2025 in exposing 870K unique email addresses across multiple compromised files, along with names, phone numbers, physical addresses, dates of birth, and government-issued personal identity numbers.
The Vietnam Airlines #databreach, part of a wider incident in October 2025, exposed 7.5M unique customer email addresses following a breach of the airline’s Salesforce, compromising data also included names, phone numbers, and dates of birth.
The Vietnam Airlines #databreach, part of a wider incident in October 2025, exposed 7.5M unique customer email addresses following a breach of the airline’s Salesforce, compromising data also included names, phone numbers, and dates of birth.
The HomeRefill #databreach in April 2020 affected the Brazilian e-commerce platform, exposing 190K unique email addresses along with names, phone numbers, dates of birth, and salted password hashes.
The HomeRefill #databreach in April 2020 affected the Brazilian e-commerce platform, exposing 190K unique email addresses along with names, phone numbers, dates of birth, and salted password hashes.
The WiredBucks #databreach in May 2022 exposed over 926K email and IP addresses along with names, usernames, earnings via the platform, physical addresses, and passwords stored in plain text.
The WiredBucks #databreach in May 2022 exposed over 926K email and IP addresses along with names, usernames, earnings via the platform, physical addresses, and passwords stored in plain text.
The MaReads #databreach in June 2025 affected the Thai-language fiction and comics platform, exposing 75K records. The compromised data included usernames, email addresses, phone numbers, and dates of birth.
The MaReads #databreach in June 2025 affected the Thai-language fiction and comics platform, exposing 75K records. The compromised data included usernames, email addresses, phone numbers, and dates of birth.
The Fédération Française de Rugby #databreach in June 2023 exposed 282K unique email addresses along with names, dates of birth, and phone numbers.
The Fédération Française de Rugby #databreach in June 2023 exposed 282K unique email addresses along with names, dates of birth, and phone numbers.
The Animeify #databreach in October 2021 exposed 808K unique email addresses along with names, usernames, genders, and plain-text passwords. The Arabic-language anime website has since been discontinued.
The Animeify #databreach in October 2021 exposed 808K unique email addresses along with names, usernames, genders, and plain-text passwords. The Arabic-language anime website has since been discontinued.
The Bouygues Telecom #databreach in August 2025 exposed almost 6.4M customer records, including 5.7M unique email addresses, along with names, physical addresses, phone numbers, and dates of birth.
The Bouygues Telecom #databreach in August 2025 exposed almost 6.4M customer records, including 5.7M unique email addresses, along with names, physical addresses, phone numbers, and dates of birth.
The University of California #databreach in December 2020 occurred due to a vulnerability in third-party provider Accellion. The incident exposed data on both students and staff, including 503K unique email addresses and more.
The University of California #databreach in December 2020 occurred due to a vulnerability in third-party provider Accellion. The incident exposed data on both students and staff, including 503K unique email addresses and more.
The Unigame #databreach in December 2019, involving the former gaming website and maker of Hunter Online, exposed 844K email addresses along with salted MD5 password hashes.
The Unigame #databreach in December 2019, involving the former gaming website and maker of Hunter Online, exposed 844K email addresses along with salted MD5 password hashes.
The Roblox Developer Conference Registration Platform #databreach in July 2024 exposed 10K unique email addresses, along with names and IP addresses.
The Roblox Developer Conference Registration Platform #databreach in July 2024 exposed 10K unique email addresses, along with names and IP addresses.
The Have Fun Teaching #databreach in August 2021 exposed 80K WooCommerce transactions, including 27K unique email addresses. The leaked data also included physical and IP addresses, names, payment methods, and details of items purchased.
The Have Fun Teaching #databreach in August 2021 exposed 80K WooCommerce transactions, including 27K unique email addresses. The leaked data also included physical and IP addresses, names, payment methods, and details of items purchased.
The OnRPG #databreach in July 2016 exposed just over 1M email and IP addresses, along with usernames and passwords stored as salted MD5 hashes.
Exposed data: Email addresses, IP addresses, Usernames, Salted MD5 hash passwords
The OnRPG #databreach in July 2016 exposed just over 1M email and IP addresses, along with usernames and passwords stored as salted MD5 hashes.
Exposed data: Email addresses, IP addresses, Usernames, Salted MD5 hash passwords
The Naz.API #databreach combo list released in September 2023 involved the publication of over 100GB of stealer logs and credential stuffing lists on a popular hacking forum exposing 71 million emails and credentials.
The Naz.API #databreach combo list released in September 2023 involved the publication of over 100GB of stealer logs and credential stuffing lists on a popular hacking forum exposing 71 million emails and credentials.
The Devil-Torrents.pl #databreach in early 2021 affected the Polish torrents website, exposing a subset of data that included 63K unique email addresses and cracked passwords.
The Devil-Torrents.pl #databreach in early 2021 affected the Polish torrents website, exposing a subset of data that included 63K unique email addresses and cracked passwords.
The Online Trade #databreach in September 2022 impacted the Russian e-commerce website, exposing 3.8M customer records. The compromised data included email and IP addresses, names, phone numbers, dates of birth, and passwords stored as MD5 hashes.
The Online Trade #databreach in September 2022 impacted the Russian e-commerce website, exposing 3.8M customer records. The compromised data included email and IP addresses, names, phone numbers, dates of birth, and passwords stored as MD5 hashes.
The Samsung Germany #databreach in March 2025 occurred via a compromise of their logistics provider, Spectos, reportedly caused by malware on an employee’s device exposing 218K unique email addresses, names, and physical addresses.
The Samsung Germany #databreach in March 2025 occurred via a compromise of their logistics provider, Spectos, reportedly caused by malware on an employee’s device exposing 218K unique email addresses, names, and physical addresses.
The 9Lives #databreach in October 2014 affected the Belgian gaming news forum, exposing 109K unique email addresses along with usernames and salted MD5 password hashes.
The 9Lives #databreach in October 2014 affected the Belgian gaming news forum, exposing 109K unique email addresses along with usernames and salted MD5 password hashes.
The Twitter API Vulnerability #databreach in 2021 exposed over 5.4M user records by exploiting a flaw that allowed attackers to input phone numbers and email addresses to retrieve associated Twitter IDs.
The Twitter API Vulnerability #databreach in 2021 exposed over 5.4M user records by exploiting a flaw that allowed attackers to input phone numbers and email addresses to retrieve associated Twitter IDs.