ShellCodeX
Tools • Events • News • Insights

Breach Tracker

Data breach timeline, exposure reports & source-backed impact intelligence

Tracking active
1,015
Breaches tracked
17,677,120,822
Accounts exposed
672
Password leaks
Moody Bible Inst...
Latest addition
6 days ago
Showing 49–72 of 1,015 tracked breaches Source: Have I Been Pwned catalogue
Cuties AI cuties.ai
Limited

In March 2026, the NSFW AI companion platform Cuties AI suffered a data breach that was subsequently published to a public hacking forum. Th...

Accounts144.3K
Breach dateMar 2025
Data types3
Avatars Display names Email addresses
BreachForums Version 5 breachforums.bf
Limited

In March 2026, a breach of one of the many iterations of the BreachForums hacking forum known as "Version 5" was publicly disclosed. The inc...

Accounts339.8K
Breach dateMar 2026
Data types3
Email addresses Passwords Usernames
Scuf Gaming scufgaming.com
Limited

In June 2015, custom gaming controller maker Scuf Gaming suffered a data breach. The incident exposed 129k unique email addresses along with...

Accounts128.7K
Breach dateJun 2015
Data types5
Display names Email addresses IP addresses +2 more
Sound Radix soundradix.com
Limited

In March 2026, the audio production tools company Sound Radix disclosed a data breach that they subsequently self-submitted to HIBP. The inc...

Accounts293K
Breach dateMar 2026
Data types3
Email addresses Names Passwords
RuneScape Boards rsboards.com
Limited

In around 2011, the now defunct RuneScape Boards forum (also known as RSBoards) suffered a data breach that was later redistributed as part...

Accounts222.8K
Breach dateDec 2011
Data types4
Email addresses IP addresses Passwords +1 more
Aura aura.com
Limited

In March 2026, the online safety service Aura disclosed a data breach that exposed 900k unique email addresses. The data was primarily assoc...

Accounts903.1K
Breach dateMar 2026
Data types6
Customer service records Email addresses IP addresses +3 more
Divine Skins divineskins.gg
Limited

In March 2026, the League of Legends custom skins service Divine Skins suffered a data breach. The incident was disclosed via the service's...

Accounts105.8K
Breach dateMar 2026
Data types3
Email addresses Purchases Usernames
Baydöner baydoner.com
Significant

In March 2026, the Turkish restaurant chain Baydöner suffered a data breach which was subsequently published to a public hacking forum. The...

Accounts1.3M
Breach dateMar 2026
Data types9
Dates of birth Email addresses Genders +6 more
Provecho provecho.bio
Limited

In early 2026, data purportedly sourced from the recipe and meal planning service Provecho was alleged to have been obtained in a breach. Th...

Accounts712.9K
Breach dateJan 2026
Data types2
Email addresses Usernames
Lovora domain unknown
Limited

In February 2026, the couples and relationship app Lovora allegedly suffered a data breach that exposed 496k unique email addresses. The dat...

Accounts495.6K
Breach dateFeb 2026
Data types3
Display names Email addresses Profile photos
Quitbro quitbro.app
Limited

In February 2026, the porn addiction app Quitbro allegedly suffered a data breach that exposed 23k unique email addresses. The data also inc...

Accounts22.9K
Breach dateFeb 2026
Data types3
Email addresses Partial dates of birth Usernames
KomikoAI komiko.app
Significant

In February, the AI-powered comic generation platform KomikoAI suffered a data breach. The incident exposed 1M unique email addresses along...

Accounts1.1M
Breach dateFeb 2026
Data types4
AI prompts Email addresses Forum posts +1 more
Odido odido.nl
Significant

In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt. Shortly after, a total of 6M unique em...

Accounts6.1M
Breach dateFeb 2026
Data types11
Bank account numbers Customer service records Dates of birth +8 more
Canadian Tire canadiantire.ca
Major

In October 2025, retailer Canadian Tire was the victim of a data breach that exposed almost 42M records. The data contained 38M unique email...

Accounts38.3M
Breach dateOct 2025
Data types8
Dates of birth Email addresses Genders +5 more
CarGurus cargurus.com
Major

In February 2026, the automotive marketplace CarGurus was the target of a data breach attributed to the threat actor ShinyHunters. Following...

Accounts12.5M
Breach dateFeb 2026
Data types5
Email addresses IP addresses Names +2 more
CarMax carmax.com
Limited

In January 2026, data allegedly sourced from US automotive retailer CarMax was published online following a failed extortion attempt. The da...

Accounts431.4K
Breach dateJan 2026
Data types4
Email addresses Names Phone numbers +1 more
Figure figure.com
Limited

In February 2026, data obtained from the fintech lending platform Figure was publicly posted online. The exposed data, dating back to Januar...

Accounts967.2K
Breach dateJan 2026
Data types5
Dates of birth Email addresses Names +2 more
Canada Goose canadagoose.com
Limited

In February 2026, a data breach allegedly containing data relating to Canada Goose customers was published publicly. The data contained 920k...

Accounts581.9K
Breach dateJul 2025
Data types8
Device information Email addresses IP addresses +5 more
University of Pennsylvania upenn.edu
Limited

In October 2025, the University of Pennsylvania was the victim of a data breach followed by a ransom demand, largely affecting its donor dat...

Accounts623.8K
Breach dateOct 2025
Data types11
Charitable donations Dates of birth Email addresses +8 more
APOIA.se apoia.se
Limited

In December 2025, a database of the Brazilian crowdfunding platform APOIA.se was posted to an online forum. In January 2026, the company con...

Accounts450.8K
Breach dateDec 2025
Data types3
Email addresses Names Physical addresses
Toy Battles toybattles.net
Limited

In February 2026, the online gaming community Toy Battles suffered a data breach. The incident exposed 1k unique email addresses alongside u...

Accounts1K
Breach dateFeb 2026
Data types4
Chat logs Email addresses IP addresses +1 more
Association Nationale des Premiers Secours anps.fr
Limited

In January 2026, a data breach impacting the French non-profit Association Nationale des Premiers Secours (ANPS) was posted to a hacking for...

Accounts5.6K
Breach dateJan 2026
Data types5
Dates of birth Email addresses Names +2 more
Substack substack.com
Limited

In October 2025, the publishing platform Substack suffered a data breach that was subsequently circulated more widely in February 2026. The...

Accounts663.1K
Breach dateOct 2025
Data types2
Email addresses Phone numbers
Betterment betterment.com
Significant

In January 2026, the automated investment platform Betterment confirmed it had suffered a data breach attributed to a social engineering att...

Accounts1.4M
Breach dateJan 2026
Data types9
Dates of birth Device information Email addresses +6 more