978 disclosed16.04 B records

BREACHBreach timeline

Disclosed breaches catalogued by Have I Been Pwned — aggregate metadata only, no PII. Refreshed weekly. Authored by Adam Lundqvist.

978
disclosed breaches
16.04 B
records compromised
68%
involve passwords
7
malware-linked

Disclosed breaches per year

2007200920112013201520172019202120232025990

Click a bar to filter the table by year. Bar tooltip shows the year’s record total.

Top 25 of 665 matching (Passwords)

Clear data-class filter
NameDomainRecordsDateData classes
LegionProxylegionproxy.io10.1 K2026-04-06Email addresses, Names, Passwords +1
Hakko Corporationhakko.com9.7 K2019-03-28Dates of birth, Email addresses, Genders +5
MEOmeoair.com8.2 K2020-12-24Email addresses, Names, Passwords +4
Vermillionv3rmillion.net8.1 K2014-08-30Dates of birth, Email addresses, IP addresses +2
ColoCrossingcolocrossing.com7.2 K2025-05-24Email addresses, Names, Passwords
The Club Penguin Experiencethecpexperience.com6.3 K2024-10-14Age groups, Email addresses, Password hints +2
Astropidastropid.com5.8 K2013-12-19Email addresses, Instant messenger identities, IP addresses +5
Spytechsensitivespytech-web.com5.6 K2024-06-04Browsing histories, Device information, Email addresses +4
BreachForums Clonebreachforums.vc4.2 K2023-06-17Email addresses, IP addresses, Passwords +1
Biohack.mebiohack.me3.4 K2016-12-02Email addresses, Passwords, Private messages +1
Bestialitysextaboosensitivebestialitysextaboo.com3.2 K2018-03-19Dates of birth, Email addresses, Genders +5
UN Internet Governance Forumintgovforum.org3.2 K2014-02-20Email addresses, Names, Passwords +1
Tescotesco.com2.2 K2014-02-12Email addresses, Passwords, Reward program balances
devkitProdevkitpro.org1.5 K2019-02-03Email addresses, Passwords, Private messages
WPSandboxwpsandbox.io8582018-11-04Email addresses, Passwords
Sourced from Have I Been Pwned. Aggregate metadata only — no PII. Curated by Adam Lundqvist, Founder at SQUR.
Breach catalogue — HIBP timeline | SQUR Knowledge Base