978 indexed

BREACHDisclosed breaches

978 disclosed breaches from Have I Been Pwned. Filter by year, or for year-on-year volume see /explore/breaches. Authored by Adam Lundqvist.

Showing 1–50 of 60 in 2025 · page 1 of 2

IDTitleSummary
ADDAADDA
1.8M records2025-03-24
In March 2025, data allegedly breached from the ADDA housing societies service was posted to a public hacking forum . The data contained over 1.8M unique email…
AdpostAdpost
3.3M records2025-02-14
In February 2025, data obtained from an earlier Adpost breach surfaced. The dataset contained 3.3M records including email addresses, usernames, and display na…
ALIEN TXTBASE Stealer LogsALIEN TXTBASE Stealer Logs
284.1M records2025-02-15
In February 2025, 23 billion rows of stealer logs were obtained from a Telegram channel known as ALIEN TXTBASE . The data contained 284M unique email addresses…
Allianz LifeAllianz Life
1.1M records2025-07-16
In July 2025, Allianz Life was the victim of a cyber attack which resulted in millions of records later being leaked online . Allianz attributed the attack to …
APOIA.seAPOIA.se
451K records2025-12-16
In December 2025, a database of the Brazilian crowdfunding platform APOIA.se was posted to an online forum . In January 2026, the company confirmed it had suff…
Artists&ClientsArtists&Clients
95K records2025-08-31
In August 2025, the "marketplace that connects artists to prospective clients" Artists&Clients, suffered a data breach and subsequent ransom demand of US$50k .…
AUTOSURAUTOSUR
487K records2025-03-16
In March 2025, the French vehicle inspection company AUTOSUR suffered a data breach exposing over 10M customer records, though only 487k unique email addresses…
Beckett CollectiblesBeckett Collectibles
1.0M records2025-11-09
In November 2025, Beckett Collectibles experienced a data breach accompanied by website content defacement . The stolen data was later advertised for sale on a…
Bouygues TelecomBouygues Telecom
5.7M records2025-08-04
In August 2025, the French telecommunications company Bouygues Telecom detected a cyber attack against their services . The incident resulted in a data breach …
BreachForums (2025)BreachForums (2025)
672K records2025-08-11
In October 2025, a reincarnation of the hacking forum BreachForums, which had previously been shut down multiple times, was taken offline by a coalition of law…
Canada GooseCanada Goose
582K records2025-07-04
In February 2026, a data breach allegedly containing data relating to Canada Goose customers was published publicly . The data contained 920k records with 582k…
Canadian TireCanadian Tire
38.3M records2025-10-02
In October 2025, retailer Canadian Tire was the victim of a data breach that exposed almost 42M records. The data contained 38M unique email addresses along wi…
CatwatchfulCatwatchful
62K records2025-06-09
In June 2025, spyware maker Catwatchful suffered a data breach that exposed over 60k customer records . The breach was due to a SQL injection vulnerability tha…
CocospyCocospy
1.8M records2025-02-14
In February 2025, the spyware service Cocospy suffered a data breach along with sibling spyware service, Spyic . The Cocospy breach alone exposed almost 1.8M c…
CodeStepByStepCodeStepByStep
103K records2025-11-15
In November 2025, the online coding practice tool CodeStepByStep suffered a data breach that exposed 17k records which were subsequently published online . The…
ColoCrossingColoCrossing
7K records2025-05-24
In May 2025, hosting provider ColoCrossing identified a data breach that impacted customers of their ColoCloud virtual server product . ColoCrossing advised th…
Creams CafeCreams Cafe
160K records2025-05-01
In May 2025, 160k records of customer data was allegedly obtained from Creams Cafe, "the UK's favourite dessert parlour". The data included email and physical …
Cuties AICuties AI
144K records2025-03-21
In March 2026, the NSFW AI companion platform Cuties AI suffered a data breach that was subsequently published to a public hacking forum . The incident exposed…
Data Troll Stealer LogsData Troll Stealer Logs
109.5M records2025-06-20
In June 2025, headlines erupted over a "16 billion password" breach . In reality, the dataset was a compilation of publicly accessible stealer logs, mostly rep…
Doxbin ScrapeDoxbin Scrape
436K records2025-01-24
In January 2025, 435k email addresses were scraped from the "doxing" service Doxbin . Posts to the service are usually intended to disclose the personal inform…
Dragonica LunarisDragonica Lunaris
126K records2025-12-06
In December 2025, the European Dragonica private server Dragonica Lunaris suffered a data breach. The incident exposed 126k email addresses, usernames, dates o…
EurofiberEurofiber
10K records2025-11-13
In November 2025, Eurofiber France disclosed a data breach of its ticket management platform . Data containing 10k unique email addresses and a smaller number …
Frame & OpticFrame & Optic
16K records2025-01-16
In January 2025, the eyewear seller Frame & Optic suffered a data breach . The incident exposed almost 16k unique email addresses along with names, phone numbe…
German Doner KebabGerman Doner Kebab
162K records2025-03-27
In March 2025, data allegedly sourced from German Doner Kebab was published on a popular hacking forum . The data included 162k unique email addresses alongsid…
GiglioGiglio
1.0M records2025-08-09
In August 2025, over 1M unique email addresses appeared in a breach allegedly obtained from Italian fashion designer Giglio. The data also included names, phon…
Hello CakeHello Cake
23K records2025-07-25
In July 2025, the sexual healthcare product maker Hello Cake suffered a data breach . The data was subsequently posted on a public hacking forum and included 2…
International Kiteboarding OrganizationInternational Kiteboarding Organization
340K records2025-11-11
In November 2025, the International Kiteboarding Organization suffered a data breach that exposed 340k user records . The data was subsequently listed for sale…
LandAirSeaLandAirSea
337K records2025-01-12
In January 2025, the GPS tracking service LandAirSea suffered a data breach that exposed 337k unique customer email addresses alongside names, usernames and pa…
LexipolLexipol
673K records2025-02-11
In February 2025, the public safety policy management systems company Lexipol suffered a data breach . Attributed to the self-proclaimed "Puppygirl Hacker Poly…
MaReadsMaReads
74K records2025-06-22
In June 2025, MaReads, the website for readers and writers of Thai-language fiction and comics suffered a data breach that exposed 74k records. The breach incl…
MiljödataMiljödata
870K records2025-08-25
In August 2025, the Swedish system supplier Miljödata was the victim of a ransomware attack . Following the attack, data was subsequently published on the dark…
MyVidster (2025)MyVidster (2025)
3.9M records2025-10-24
In October 2025, the data of almost 4M MyVidster users was posted to a public hacking forum . Separate to the 2015 breach, this incident exposed usernames, ema…
OmnicurisOmnicuris
215K records2025-06-08
In June 2025, the Indian CME platform Omnicuris suffered a data breach that exposed approximately 200k records of healthcare professionals. The data included n…
Operation Endgame 2.0Operation Endgame 2.0
15.4M records2025-05-23malware
In May 2025, a coalition of law enforcement agencies took down the criminal infrastructure behind the malware used to launch ransomware attacks in a new phase …
Operation Endgame 3.0Operation Endgame 3.0
2.0M records2025-11-13malware
Between 10 and 13 November 2025, the latest phase of Operation Endgame was coordinated from Europol's headquarters in The Hague . The actions targeted one of t…
Orange RomaniaOrange Romania
557K records2025-02-24
In February 2025, the Romanian arm of telecommunications company Orange suffered a data breach which was subsequently published to a popular hacking forum . Th…
Pass'SportPass'Sport
6.4M records2025-12-17
In December 2025, data from France's Pass'Sport program was posted to a popular hacking forum . Initially misattributed to CAF (the French family allowance fun…
Pi-holePi-hole
30K records2025-07-30
In July 2025, a vulnerability in the GiveWP WordPress plugin exposed the names and email addresses of approximately 30k donors to the Pi-hole network-wide ad b…
ProsperProsper
17.6M records2025-09-01
In September 2025, Prosper announced that it had detected unauthorised access to their systems, which resulted in the exposure of customer and applicant inform…
RaagaRaaga
10.2M records2025-12-15
In December 2025, data allegedly breached from the Indian streaming music service "Raaga" was posted for sale to a popular hacking forum . The data contained 1…
Samsung Germany Customer TicketsSamsung Germany Customer Tickets
216K records2025-03-30
In March 2025, data from Samsung Germany was compromised in a data breach of their logistics provider, Spectos . Allegedly due to credentials being obtained by…
ScholasticScholastic
4.2M records2025-01-08
In January 2025, a data breach of the publishing company Scholastic surfaced . The breach contained 4.2M unique email addresses with many of the records also i…
SoundCloudSoundCloud
29.8M records2025-12-15
In December 2025, SoundCloud announced it had discovered unauthorised activity on its platform . The incident allowed an attacker to map publicly available Sou…
SpyicSpyic
876K records2025-02-14
In February 2025, the spyware service Spyic suffered a data breach along with sibling spyware service, Cocospy . The Spyic breach alone exposed almost 876k cus…
Stealer Logs, Jan 2025Stealer Logs, Jan 2025
71.0M records2025-01-13
In January 2025, stealer logs with 71M email addresses were added to HIBP . Consisting of email address, password and the website the credentials were entered …
SubstackSubstack
663K records2025-10-23
In October 2025, the publishing platform Substack suffered a data breach that was subsequently circulated more widely in February 2026. The breach exposed 663k…
Synthient Credential Stuffing Threat DataSynthient Credential Stuffing Threat Data
2.0B records2025-04-11
During 2025, the threat-intelligence firm Synthient aggregated 2 billion unique email addresses disclosed in credential-stuffing lists found across multiple ma…
Synthient Stealer Log Threat DataSynthient Stealer Log Threat Data
183.0M records2025-04-11
During 2025, Synthient aggregated billions of records of "threat data" from various internet sources . The data contained 183M unique email addresses alongside…
TehetségKapuTehetségKapu
54K records2025-03-26
In March 2025, almost 55k records were breached from the Hungarian education office website TehetségKapu . The data was subsequently published to a popular hac…
Thermomix Recipe World ForumThermomix Recipe World Forum
3.1M records2025-01-30
In January 2025, the Rezeptwelt (German for "recipe world") forum for Thermomix owners suffered a data breach . The incident exposed 3.1M registered users' det…
Sourced from Have I Been Pwned. Aggregate metadata only — no PII. Curated by Adam Lundqvist, Founder at SQUR.
Disclosed breaches — by year | SQUR Knowledge Base