ShellCodeX
Tools • Events • News • Insights

Breach Tracker

Data breach timeline, exposure reports & source-backed impact intelligence

Tracking active
1,015
Breaches tracked
17,677,120,822
Accounts exposed
672
Password leaks
Moody Bible Inst...
Latest addition
6 days ago
Showing 289–312 of 1,015 tracked breaches Source: Have I Been Pwned catalogue
IndiHome indihome.co.id
Major

In mid-2021, reports emerged of a data breach of Indonesia's telecommunications company, IndiHome. Over 26M rows of data alleged to have bee...

Accounts12.6M
Breach dateNov 2019
Data types6
Device information Email addresses Genders +3 more
Jam Tangan jamtangan.com
Limited

In July 2021, the online Indonesian watch store, Jam Tangan (AKA Machtwatch), suffered a data breach that exposed over 400k customer records...

Accounts434.8K
Breach dateJul 2021
Data types6
Email addresses IP addresses Names +3 more
KitchenPal kitchenpalapp.com
Limited

In November 2023, the kitchen management application KitchenPal suffered a data breach that exposed 146k lines of data. When contacted about...

Accounts98.7K
Breach dateNov 2023
Data types8
Dates of birth Email addresses Genders +5 more
OMGPOP omgpop.com
Significant

In approximately 2013, the maker of the Draw Something game OMGPOP suffered a data breach. Formerly known as i'minlikewithyou or iilwy and l...

Accounts7.1M
Breach dateJan 2013
Data types2
Email addresses Passwords
Acuity domain unknown
Major

In mid-2020, a 437GB corpus of data attributed to an entity named "Acuity" was created and later extensively distributed. However, the sourc...

Accounts14.1M
Breach dateJun 2020
Data types8
Dates of birth Email addresses Genders +5 more
Avito avito.ma
Significant

In November 2022, the Moroccan e-commerce service Avito suffered a data breach that exposed the personal information of 2.7M customers. The...

Accounts2.7M
Breach dateNov 2022
Data types5
Email addresses Geographic locations IP addresses +2 more
Chess chess.com
Significant

In November 2023, over 800k user records were scraped from the Chess website and posted to a popular hacking forum. The data included email...

Accounts1.3M
Breach dateNov 2023
Data types4
Email addresses Geographic locations Names +1 more
LinkedIn Scraped and Faked Data (2023) linkedin.com
Major

In November 2023, a post to a popular hacking forum alleged that millions of LinkedIn records had been scraped and leaked. On investigation,...

Accounts19.8M
Breach dateNov 2023
Data types7
Email addresses Genders Geographic locations +4 more
GamingMonk gamingmonk.com
Limited

In December 2020, India's "largest esports community" GamingMonk (since acquired by and redirected to MPL Esports), suffered a data breach....

Accounts654.5K
Breach dateDec 2020
Data types6
Dates of birth Email addresses Names +3 more
Fitmart fitmart.de
Limited

In October 2021, data from the German fitness supplies store Fitmart was obtained and later redistributed online. The data included 214k uni...

Accounts214.5K
Breach dateOct 2021
Data types2
Email addresses Passwords
GameSprite gamesprite.me
Significant

In December 2019, the now defunct gaming platform GameSprite suffered a data breach that exposed over 6M unique email addresses. The impacte...

Accounts6.2M
Breach dateDec 2019
Data types4
Email addresses IP addresses Passwords +1 more
MemeChat memechat.app
Significant

In mid-2022, "the ultimate hub of memes" MemeChat suffered a data breach that exposed 7.4M records. Alleged to be due to a misconfigured Ela...

Accounts4.3M
Breach dateJun 2022
Data types2
Email addresses Usernames
Toumei toumei.co.jp
Limited

In October 2023, the Japanese consultancy firm Toumei suffered a data breach. The breach exposed over 100M lines and 10GB of data including...

Accounts76.7K
Breach dateOct 2023
Data types4
Email addresses Names Phone numbers +1 more
Tunngle tunngle.net
Significant

In 2016, the now defunct global LAN gaming network Tunngle suffered a data breach that exposed 8.2M unique email addresses. The compromised...

Accounts8.2M
Breach dateJul 2016
Data types4
Email addresses IP addresses Passwords +1 more
Sphero sphero.com
Limited

In September 2023, over 1M rows of data from the educational robots company Sphero was posted to a popular hacking forum. The data contained...

Accounts832.3K
Breach dateSep 2023
Data types5
Dates of birth Email addresses Geographic locations +2 more
AndroidLista androidlista.com
Significant

In July 2021, the Android applications and games review site AndroidLista suffered a data breach. The incident exposed 6.6M user records con...

Accounts6.6M
Breach dateJul 2021
Data types4
Email addresses Names Passwords +1 more
Phoenix phoenixim.ddns.net
Limited

In mid-2021, the "vintage messaging reborn" service Phoenix suffered a data breach that exposed 75k unique email addresses. The breach also...

Accounts74.8K
Breach dateJun 2021
Data types4
Email addresses IP addresses Passwords +1 more
Public Business Data bvdinfo.com
Major

In approximately August 2021, hundreds of gigabytes of business data collated from public sources was obtained and later published to a popu...

Accounts27.9M
Breach dateAug 2021
Data types6
Dates of birth Email addresses Job titles +3 more
PaySystem.tech paysystem.tech
Significant

In mid-2022, data alleged to have been sourced from the Russian payment provider PaySystem.tech appeared in hacking circles where it was mad...

Accounts1.4M
Breach dateApr 2022
Data types3
Credit cards Email addresses Purchases
Hjedd hjedd.com
Major

In July 2022, the Chinese adult website Hjedd was found to be leaking more than 13M customer records which subsequently appeared on a popula...

Accounts13.2M
Breach dateJul 2022
Data types4
Email addresses IP addresses Passwords +1 more
Activision activision.com
Limited

In December 2022, attackers socially engineered an Activision HR employee into disclosing information which led to the breach of almost 20k...

Accounts16K
Breach dateDec 2022
Data types5
Email addresses Geographic locations Job titles +2 more
Horse Isle horseisle.com
Limited

In June 2020 then again in September that same year, Horse Isle "The Secrent Land of Horses" suffered a data breach. The incident exposed 28...

Accounts27.8K
Breach dateSep 2020
Data types7
Email addresses Genders IP addresses +4 more
ApexSMS domain unknown
Major

In May 2019, news broke of a massive SMS spam operation known as "ApexSMS" which was discovered after a MongoDB instance of the same name wa...

Accounts23.2M
Breach dateApr 2019
Data types7
Email addresses Genders Geographic locations +4 more
dBforums dbforums.com
Limited

In July 2016, a data breach of the now defunct database forum "dBforums" appeared for sale alongside several others hacked from the parent c...

Accounts363.5K
Breach dateJul 2016
Data types5
Dates of birth Email addresses IP addresses +2 more