978 disclosed16.04 B records

BREACHBreach timeline

Disclosed breaches catalogued by Have I Been Pwned — aggregate metadata only, no PII. Refreshed weekly. Authored by Adam Lundqvist.

978
disclosed breaches
16.04 B
records compromised
68%
involve passwords
7
malware-linked

Disclosed breaches per year

2007200920112013201520172019202120232025990

Click a bar to filter the table by year. Bar tooltip shows the year’s record total.

Top 25 of 475 matching (Usernames)

Clear data-class filter
NameDomainRecordsDateData classes
DLH.netdlh.net3.3 M2016-07-31Dates of birth, Email addresses, Names +3
ClickASnapclickasnap.com3.3 M2022-09-24Email addresses, Names, Passwords +4
Pluto TVpluto.tv3.2 M2018-10-12Dates of birth, Device information, Email addresses +6
Thermomix Recipe World Forumrezeptwelt.de3.1 M2025-01-30Bios, Dates of birth, Email addresses +4
MPGHmpgh.net3.1 M2015-10-22Email addresses, IP addresses, Passwords +1
VimeWorldvimeworld.com3.1 M2018-10-01Email addresses, IP addresses, Passwords +1
MangaDexmangadex.org3.0 M2021-03-22Email addresses, IP addresses, Passwords +1
XSplitxsplit.com3.0 M2013-11-07Email addresses, Names, Passwords +1
BudTradersensitivebudtrader.com2.7 M2024-06-27Email addresses, Passwords, Usernames
SwordFantasyswordfantasy.com2.7 M2017-01-20Email addresses, IP addresses, Passwords +1
Duolingoduolingo.com2.7 M2023-01-24Email addresses, Names, Spoken languages +1
Duowan.comduowan.com2.6 M2011-01-01Email addresses, Passwords, Usernames
GSM Hostinggsmhosting.com2.6 M2016-08-01Email addresses, IP addresses, Passwords +1
CraftRisecraftrise.com.tr2.5 M2022-03-05Email addresses, Geographic locations, Passwords +1
Funimationfunimation.com2.5 M2016-07-01Dates of birth, Email addresses, Passwords +1
iPmartipmart-forum.com2.5 M2015-07-01Dates of birth, Email addresses, Passwords +1
APK.TWapk.tw2.5 M2022-09-03Email addresses, IP addresses, Passwords +1
ClixSenseclixsense.com2.4 M2016-09-04Account balances, Dates of birth, Email addresses +9
GGCorpggcorp.me2.4 M2022-08-11Email addresses, IP addresses, Passwords +1
Elanicelanic.in2.3 M2018-01-01Email addresses, Geographic locations, Usernames
Wishbone (2016)wishbone.io2.2 M2016-08-07Auth tokens, Dates of birth, Email addresses +4
Bell (2017 breach)bell.ca2.2 M2017-05-15Email addresses, Geographic locations, IP addresses +7
StarTribunestartribune.com2.2 M2019-10-10Dates of birth, Email addresses, Genders +4
gPotatogpotato.com2.1 M2007-07-12Dates of birth, Email addresses, Genders +7
Exvagosexvagos.org2.1 M2022-07-21Dates of birth, Email addresses, IP addresses +2
Sourced from Have I Been Pwned. Aggregate metadata only — no PII. Curated by Adam Lundqvist, Founder at SQUR.
Breach catalogue — HIBP timeline | SQUR Knowledge Base