978 disclosed16.04 B records
BREACHBreach timeline
Disclosed breaches catalogued by Have I Been Pwned — aggregate metadata only, no PII. Refreshed weekly. Authored by Adam Lundqvist.
978
disclosed breaches
16.04 B
records compromised
68%
involve passwords
7
malware-linked
Disclosed breaches per year
Click a bar to filter the table by year. Bar tooltip shows the year’s record total.
Top 25 of 978 matching
| Name | Domain | Records | Date | Data classes |
|---|---|---|---|---|
| Amtrak | amtrak.com | 2.1 M | 2026-04-03 | Email addresses, Names, Physical addresses +1 |
| gPotato | gpotato.com | 2.1 M | 2007-07-12 | Dates of birth, Email addresses, Genders +7 |
| MC2 Data | — | 2.1 M | 2024-08-18 | Email addresses, Names, Passwords |
| Exvagos | exvagos.org | 2.1 M | 2022-07-21 | Dates of birth, Email addresses, IP addresses +2 |
| Banorte | banorte.com | 2.1 M | 2014-08-18 | Account balances, Email addresses, Genders +4 |
| Piping Rock | pipingrock.com | 2.1 M | 2024-04-24 | Email addresses, Names, Phone numbers +1 |
| Boulanger | boulanger.com | 2.1 M | 2024-09-06 | Email addresses, Geographic locations, Latitude and longitude pairs +3 |
| Terravision | terravision.eu | 2.1 M | 2023-02-01 | Dates of birth, Email addresses, Geographic locations +3 |
| GameTuts | game-tuts.com | 2.1 M | 2015-03-01 | Email addresses, IP addresses, Passwords +1 |
| Operation Endgame 3.0malware | — | 2.0 M | 2025-11-13 | Email addresses, Passwords |
| Shadi.comsensitive | shadi.com | 2.0 M | 2016-07-09 | Email addresses, Passwords |
| V-Tight Gelsensitive | vtightgel.com | 2.0 M | 2016-02-13 | Email addresses, IP addresses, Names +2 |
| SpyXsensitive | spyx.com | 2.0 M | 2024-06-24 | Device information, Email addresses, Geographic locations +2 |
| KnownCircle | knowncircle.com | 2.0 M | 2016-04-12 | Email addresses, Email messages, Genders +4 |
| Ticketcounter | ticketcounter.nl | 1.9 M | 2021-02-22 | Bank account numbers, Dates of birth, Email addresses +6 |
| Muah.AIsensitive | muah.ai | 1.9 M | 2024-09-17 | AI prompts, Email addresses, Sexual fetishes |
| Dota2 | dev.dota2.com | 1.9 M | 2016-07-10 | Email addresses, IP addresses, Passwords +1 |
| Pixlr | pixlr.com | 1.9 M | 2020-10-07 | Email addresses, Geographic locations, Names +2 |
| CD Projekt RED | cdprojektred.com | 1.9 M | 2016-03-01 | Email addresses, Passwords, Usernames |
| Flash Flash Revolution (2019 breach) | flashflashrevolution.com | 1.9 M | 2019-07-16 | Dates of birth, Email addresses, IP addresses +2 |
| Marcus & Millichap | marcusmillichap.com | 1.8 M | 2026-04-12 | Email addresses, Employers, Job titles +3 |
| Oxfam | oxfam.org.au | 1.8 M | 2021-01-20 | Bank account numbers, Dates of birth, Email addresses +6 |
| ADDA | adda.io | 1.8 M | 2025-03-24 | Email addresses, Names, Passwords +1 |
| Cocospysensitive | cocospy.com | 1.8 M | 2025-02-14 | Email addresses |
| StreamCraft | streamcraft.net | 1.8 M | 2020-07-06 | Email addresses, IP addresses, Passwords +1 |