978 indexed
BREACHDisclosed breaches
978 disclosed breaches from Have I Been Pwned. Filter by year, or for year-on-year volume see /explore/breaches. Authored by Adam Lundqvist.
46 in 2026 · 978 total
| ID | Title | Summary |
|---|---|---|
| 7-Eleven | 7-Eleven 185K records2026-04-08 | In April 2026, 7-Eleven was the victim of a "pay or leak" extortion campaign by ShinyHunters , with the data later published that month. The incident exposed 1… |
| Abrigo | Abrigo 711K records2026-04-14 | In April 2026, the fintech software company Abrigo was targeted in a "pay or leak" extortion attempt by the ShinyHunters group . Shortly after, data allegedly … |
| Addi | Addi 34.5M records2026-03-25 | In March 2026, the Colombian fintech company Addi identified unauthorised activity on its platform and advised customers that "it is possible that your persona… |
| ADT | ADT 5.5M records2026-04-20 | In April 2026, home security firm ADT confirmed a data breach by ShinyHunters , which listed the company on its website as part of a "pay or leak" extortion at… |
| Aman | Aman 216K records2026-04-20 | In April 2026, the ultra-luxury hotel brand Aman was named by ShinyHunters as the target of a "pay or leak" extortion campaign , with the data allegedly obtain… |
| Ameriprise | Ameriprise 503K records2026-03-02 | In March 2026, the financial services firm Ameriprise Financial was named by the ShinyHunters group in a "pay or leak" extortion campaign . The group claimed p… |
| Amtrak | Amtrak 2.1M records2026-04-03 | In April 2026, the hacking group ShinyHunters claimed they had breached Amtrak . The group typically compromises organisations' Salesforce instances before dem… |
| Association Nationale des Premiers Secours | Association Nationale des Premiers Secours 6K records2026-01-30 | In January 2026, a data breach impacting the French non-profit Association Nationale des Premiers Secours (ANPS) was posted to a hacking forum . The breach exp… |
| Aura | Aura 903K records2026-03-06 | In March 2026, the online safety service Aura disclosed a data breach that exposed 900k unique email addresses . The data was primarily associated with a marke… |
| Baydöner | Baydöner 1.3M records2026-03-08 | In March 2026, the Turkish restaurant chain Baydöner suffered a data breach which was subsequently published to a public hacking forum . The incident exposed o… |
| Betterment | Betterment 1.4M records2026-01-09 | In January 2026, the automated investment platform Betterment confirmed it had suffered a data breach attributed to a social engineering attack . As part of th… |
| BreachForums Version 5 | BreachForums Version 5 340K records2026-03-26 | In March 2026, a breach of one of the many iterations of the BreachForums hacking forum known as "Version 5" was publicly disclosed . The incident exposed 340k… |
| Canada Life | Canada Life 238K records2026-04-20 | In April 2026, Canada Life was the victim of a "pay or leak" extortion campaign by the ShinyHunters group . The group subsequently published the data which con… |
| CarGurus | CarGurus 12.5M records2026-02-14 | In February 2026, the automotive marketplace CarGurus was the target of a data breach attributed to the threat actor ShinyHunters . Following an attempted exto… |
| CarMax | CarMax 431K records2026-01-24 | In January 2026, data allegedly sourced from US automotive retailer CarMax was published online following a failed extortion attempt . The data included 431k u… |
| Carnival | Carnival 7.5M records2026-04-18 | In April 2026, the notorious hacking collective ShinyHunters claimed they had obtained a substantial volume of data belonging to the Carnival cruise operator a… |
| Crunchyroll | Crunchyroll 1.2M records2026-03-12 | In March 2026, the anime streaming service Crunchyroll suffered a data breach alleged to have impacted 6.8M users . The exposed data is reported to have origin… |
| CTT | CTT 468K records2026-04-26 | In April 2026, data allegedly obtained from CTT, Portugal's national postal service, was posted to a public hacking forum . The data included 468k unique email… |
| Cushman & Wakefield | Cushman & Wakefield 310K records2026-05-05 | In May 2026, the real estate services firm Cushman & Wakefield was the target of a "pay or leak" extortion campaign by the ShinyHunters group . Following the t… |
| Divine Skins | Divine Skins 106K records2026-03-13 | In March 2026, the League of Legends custom skins service Divine Skins suffered a data breach . The incident was disclosed via the service's Discord server, wh… |
| Figure | Figure 967K records2026-01-28 | In February 2026, data obtained from the fintech lending platform Figure was publicly posted online . The exposed data, dating back to January 2026, contained … |
| Hallmark | Hallmark 1.7M records2026-03-31 | In March 2026, Hallmark suffered an alleged breach and subsequent extortion after attackers gained access to data stored within Salesforce. The data was later … |
| Instagram 6.2M records2026-01-07 | In January 2026, data allegedly scraped via an Instagram API was posted to a popular hacking forum . The dataset contained 17M rows of public Instagram informa… | |
| Kemper | Kemper 269K records2026-04-15 | In April 2026, the American insurance holding company Kemper Corporation was named by the ShinyHunters ransomware group in a "pay or leak" extortion campaign .… |
| KomikoAI | KomikoAI 1.1M records2026-02-25 | In February, the AI-powered comic generation platform KomikoAI suffered a data breach . The incident exposed 1M unique email addresses along with names, user p… |
| LegionProxy | LegionProxy 10K records2026-04-06 | In April 2026, the commercial residential and ISP proxy network LegionProxy suffered a data breach . The incident exposed 10k email addresses, bcrypt password … |
| Lovora | Lovora 496K records2026-02-25 | In February 2026, the couples and relationship app Lovora allegedly suffered a data breach that exposed 496k unique email addresses. The data also included use… |
| Marcus & Millichap | Marcus & Millichap 1.8M records2026-04-12 | In April 2026, the commercial real estate brokerage firm Marcus & Millichap was named as one of multiple alleged victims of the ShinyHunters hacking and extort… |
| McGraw Hill | McGraw Hill 13.5M records2026-04-10 | In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt . Attributed to a Salesforce misconfiguration, the company … |
| My Lovely AI | My Lovely AI 106K records2026-04-07 | In April 2026, the NSFW AI girlfriend platform My Lovely AI suffered a data breach that exposed over 100k users . The data included user-created prompts and li… |
| Mytheresa | Mytheresa 84K records2026-04-12 | In April 2026, the luxury fashion e-commerce platform Mytheresa was listed as a victim of the ShinyHunters "pay or leak" extortion group . After the ransom dea… |
| Odido | Odido 6.1M records2026-02-12 | In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt . Shortly after, a total of 6M unique email addresses were… |
| Panera Bread | Panera Bread 5.1M records2026-01-07 | In January 2026, Panera Bread suffered a data breach that exposed 14M records . After an attempted extortion failed, the attackers published the data publicly,… |
| Pitney Bowes | Pitney Bowes 8.2M records2026-04-20 | In April 2026, the hacking collective ShinyHunters claimed to have obtained data from Pitney Bowes as part of a broader extortion campaign that also named seve… |
| Provecho | Provecho 713K records2026-01-30 | In early 2026, data purportedly sourced from the recipe and meal planning service Provecho was alleged to have been obtained in a breach. The exposed data incl… |
| Quitbro | Quitbro 23K records2026-02-17 | In February 2026, the porn addiction app Quitbro allegedly suffered a data breach that exposed 23k unique email addresses. The data also included users’ years … |
| Reborn Gaming | Reborn Gaming 126 records2026-04-30 | In April 2026, the gaming community Reborn Gaming suffered a data breach due to a vulnerability in cPanel and WebHost Manager (WHM) . The breach exposed 126 un… |
| SongTrivia2 | SongTrivia2 292K records2026-04-02 | In April 2026, the music trivia platform SongTrivia2 suffered a data breach that was subsequently published to a public hacking forum . The data contained a to… |
| Sound Radix | Sound Radix 293K records2026-03-25 | In March 2026, the audio production tools company Sound Radix disclosed a data breach that they subsequently self-submitted to HIBP . The incident impacted 293… |
| SUCCESS | SUCCESS 254K records2026-03-04 | In March 2026, the personal development and achievement media brand SUCCESS suffered a data breach . The incident exposed 250k unique email addresses along wit… |
| Toy Battles | Toy Battles 1K records2026-02-06 | In February 2026, the online gaming community Toy Battles suffered a data breach. The incident exposed 1k unique email addresses alongside usernames, IP addres… |
| Udemy | Udemy 1.4M records2026-04-24 | In April 2026, online training company Udemy was the victim of a “pay or leak” extortion attempt perpetrated by the ShinyHunters group. The data was subsequent… |
| Vimeo | Vimeo 119K records2026-04-28 | In April 2026, the ShinyHunters extortion group listed Vimeo on their extortion portal as part of their "pay or leak" campaign . They subsequently published hu… |
| Woflow | Woflow 448K records2026-03-04 | In March 2026, the AI-driven merchant data platform Woflow was named as a victim by the ShinyHunters data extortion group . The group subsequently published te… |
| Zara | Zara 197K records2026-04-15 | In April 2026, the fashion brand Zara was among a number of organisations targeted by the ShinyHunters extortion group as part of their "pay or leak" campaign.… |
| ZenBusiness | ZenBusiness 5.1M records2026-03-27 | In March 2026, the hacker and extortion group "ShinyHunters" claimed to have obtained a substantial corpus of data from ZenBusiness , a business formation and … |