978 disclosed16.04 B records

BREACHBreach timeline

Disclosed breaches catalogued by Have I Been Pwned — aggregate metadata only, no PII. Refreshed weekly. Authored by Adam Lundqvist.

978
disclosed breaches
16.04 B
records compromised
68%
involve passwords
7
malware-linked

Disclosed breaches per year

Clear year filter (2026)
2007200920112013201520172019202120232025990

Click a bar to filter the table by year. Bar tooltip shows the year’s record total.

Top 7 of 7 matching (Usernames) (2026)

Clear data-class filter
NameDomainRecordsDateData classes
Instagraminstagram.com6.2 M2026-01-07Display names, Email addresses, Geographic locations +2
Provechoprovecho.bio712.9 K2026-01-30Email addresses, Usernames
BreachForums Version 5breachforums.bf339.8 K2026-03-26Email addresses, Passwords, Usernames
SongTrivia2songtrivia2.io291.7 K2026-04-02Auth tokens, Avatars, Email addresses +3
Divine Skinsdivineskins.gg105.8 K2026-03-13Email addresses, Purchases, Usernames
Quitbrosensitivequitbro.app22.9 K2026-02-17Email addresses, Partial dates of birth, Usernames
Toy Battlestoybattles.net1.0 K2026-02-06Chat logs, Email addresses, IP addresses +1
Sourced from Have I Been Pwned. Aggregate metadata only — no PII. Curated by Adam Lundqvist, Founder at SQUR.
Breach catalogue — HIBP timeline | SQUR Knowledge Base