Aha! Data Breach Exposes Over 26,000 Customers: Here’s What We Know
Breach Date: October 1, 2024 Publish Date: March 1, 2025 Industry: eCommerce, IT Services...
Verticalscope.com and all of their domains were hacked in February of 2016
Preface Verticalscope.com and all of their domains were hacked in February of 2016....
Socialblade.com was hacked in August of 2016
Table of Contents Summary Passwords Leafyishere sub botting controversy Summary Socialblade.com...
WebHostingTalk.com, Mac-Forums.com, DbForums.com and ABestWeb.com all owned by Penton were hacked on July 4th, 2016
Preface WebHostingTalk.com, Mac-Forums.com, DbForums.com and ABestWeb.com all owned by Penton...
Shadi.com another dating site was hacked around July 10th, 2016
Preface Shortly after the hack of MuslimMatch.com, Shadi.com another dating site was hacked...
Dota2 official forums was hacked on July 10th, 2016
Table of Contents Summary Passwords Emails Summary Dota2 official forums was hacked on July...
Twitter credentials are being traded in the tens of millions on the dark web
Preface Twitter credentials are being traded in the tens of millions on the dark web....
Subdomains belonging to mail.ru were hacked in August of 2016
Table of Contents About Us Summary Passwords About us LeakedSource is already the best data...
LinkedIn.com was hacked in June 2012 and a copy of data for 167,370,910 accounts has been obtained by LeakedSource
Preface LinkedIn.com was hacked in June 2012 and a copy of data for 167,370,910 accounts has...
Two Bitcoin related websites were hacked, namely Btc-E.com and Bitcointalk.org
Summary Two Bitcoin related websites were hacked, namely Btc-E.com (a Bitcoin exchange acting...
iQuantsGraph
In April 2024, iQuantsGraph, an investment firm, experienced a data breach compromising approximately 7 million records. The leaked information included email addresses, phone numbers, full names, genders, dates of birth, geographical locations, and bcrypt-hashed passwords. This incident underscores the critical need for robust cybersecurity measures to protect sensitive financial and personal data.
InstaPark
In December 2022, InstaPark, a U.S.-based platform for booking parking spaces, experienced a data breach that affected approximately 450,000 records. The exposed information included email addresses, full names, IP addresses, and passwords hashed with MD5 and salt. This breach highlights the necessity of strong cybersecurity practices to safeguard user data against exploitation.
BreachForums Private Satanic 10M ULP Sept #10 by Satanic
On September 4, 2024, a stealer log titled Private Satanic 10M ULP Sept #10 appeared on a prominent hacking forum, comprising roughly 10 million records. The log exposed around 1.4 million unique email addresses, plaintext passwords, and homepage URLs. This release was the last entry in a ten-part series shared by the same individual, underscoring the risks associated with unauthorized data leaks and the necessity of stringent cybersecurity measures.
HelpyFood
In early 2023, HelpyFood, a French call management solution for restaurants, experienced a data breach that compromised around 661,000 records. The exposed data included email addresses, usernames, full names, phone numbers, IP addresses, and passwords stored in both plain text and hashed using bcrypt or MD5. This incident emphasizes the critical importance of robust cybersecurity measures to protect sensitive user information from unauthorized access.
BreachForums 28.9M ULP by Holazuni
On November 15, 2024, a stealer log titled 28 956 905 URL LOGIN PASS (CLEAN) was shared on a prominent hacking forum, consisting of approximately 29 million records. The exposed data includes around 7.24 million unique email addresses, plaintext passwords, and homepage URLs. This incident underscores the growing risks of stolen credentials and reinforces the importance of implementing strong cybersecurity measures, such as multi-factor authentication and monitoring for compromised credentials.
LeadBox
In November 2024, LeadBox, a lead management platform based in Ecuador, experienced a data breach affecting around 203,000 records. The exposed information included email addresses, full names, and phone numbers. This incident underscores the critical importance of implementing strong cybersecurity measures to protect user data from unauthorized access.
Avis Intercomunale
In November 2024, Avis Intercomunale, an Italian platform dedicated to volunteer blood donation and social services, experienced a data breach affecting 420,000 users. The compromised information included names, addresses, genders, birthdates, and email addresses. This breach underscores the critical importance of implementing strong cybersecurity measures to protect sensitive user data and uphold trust in charitable organizations.
Навигатор поступления (Admission Navigator)
In early 2023, Admission Navigator, a Russian website focused on education and career planning, suffered a data breach affecting approximately 520,000 records. The compromised information included email addresses, phone numbers, usernames, password hashes, and geographical locations. This breach highlights the risks associated with storing sensitive personal data online.
Prixet
In December 2024, Prixet.com, an online platform service for digital engagement and communication, experienced a data breach affecting 400,000 users. The exposed data included full names, email addresses, phone numbers, birthdates, and genders. This breach underscores the importance of implementing strong cybersecurity measures to safeguard sensitive user information and maintain trust in digital communication platforms.
BreachForums Private Satanic 10M ULP Sept #9 by Satanic
On September 4, 2024, a stealer log named Private Satanic 10M ULP Sept #9 was posted on a major hacking forum, containing around 10 million records. The stealer log compromised around 2.5 million unique email addresses, plaintext passwords, and homepage URLs. This was the ninth installment in a ten-part series released by the same user, highlighting ongoing security vulnerabilities and the importance of proactive data protection strategies.
Comodo Forums
In September 2019, the forums of the cybersecurity company Comodo experienced a data breach that impacted approximately 173,000 members. The compromised data included email addresses, usernames, IP addresses, and passwords stored as MD5 hashes. While Comodo initially informed users on its forums about the breach, the notification post has since been removed. This incident underscores the importance of strong encryption standards and transparent communication in cybersecurity.
Respect Shoes
In July 2024, Respect Shoes, a Belarusian online retailer for shoes and accessories, suffered a data breach affecting approximately 103,000 records. The leaked data included email addresses, phone numbers, full names, and dates of birth. This breach emphasizes the critical need for robust cybersecurity practices to safeguard personal information and maintain customer trust.
Uchi-Fitness
In May 2024, Uchi-Fitness, a Russian fitness website, experienced a data breach affecting 505,000 records. The exposed information included email addresses and user IDs. This incident highlights the importance of robust cybersecurity measures to protect user data and maintain trust in online fitness platforms.
BreachForums Private Satanic 10M ULP Sept #8 by Satanic
On September 4, 2024, a stealer log titled Private Satanic 10M ULP Sept #8 was posted on a well-known hacking forum. The stealer log, which contained approximately 10M records, revealed around 2.4 million unique email addresses, plaintext passwords, and homepage URLs. This was the eighth installment in a ten-part series by the same user, further emphasizing the persistent risks tied to data leaks and the critical importance of robust cybersecurity measures.
BreachForums Horizon Clouds 41M ULP by paninecon
On July 4, 2024, a stealer log titled NEW FRESH 41MILION LINES URL-LOG-PASS - Horizon Clouds was uploaded to a prominent hacking forum, containing approximately 41 million records. The log exposed 1.90 million unique email addresses, plaintext passwords, and homepage URLs. This breach underscores the necessity of robust cybersecurity practices to prevent such large-scale exposures and protect sensitive user information.
MyWebSport
In December 2024, MyWebSport, an Austrian IT and laser-based solution for semi-virtual table-to-table billiards at remote locations, experienced a data breach affecting 1,300 users. The exposed data included email addresses, usernames, full names, and password salts stored using the MD5 hashing algorithm. This incident highlights the importance of robust cybersecurity measures, including modern and secure password storage practices, to protect user information and uphold trust in innovative technology platforms.
BreachForums Horizon Clouds 13M ULP by paninecon
On July 2, 2024, a stealer log titled 13 MILLION LINES URL:LOG:PASS - Horizon Clouds was uploaded to a prominent hacking forum, containing approximately 13 million records. The log exposed 894,124 unique email addresses, plaintext passwords, and homepage URLs. This breach underscores the necessity of robust cybersecurity practices to prevent such large-scale exposures and protect sensitive user information.
KoolDox
In June 2022, Kooldox, a US-based SEO optimization website, experienced a data breach that impacted approximately 50,000 records. The leaked information included email addresses, full names, IP addresses phone numbers, genders, physical addresses, and hashed passwords. This breach highlights the critical need for robust data protection protocols to ensure user information remains secure from unauthorized access.
E-Kitchens
In October 2022, E-Kitchens, an Israeli kitchen design and modeling website, suffered a data breach affecting over 54,000 records. The compromised information included email addresses. This incident underscores the importance of robust cybersecurity measures for protecting user data.
Shark Market
In December 2024, SharkMarket.vn, a Vietnamese e-commerce platform, experienced a data breach that exposed 192,258 rows of data. The compromised information included entity IDs, increment IDs, creation dates and times, statuses, customer email addresses, payment methods, wards, districts, regions, delivery types, completed dates, and completion times. This breach highlights the critical importance of implementing strong cybersecurity measures to protect sensitive transactional data and maintain trust in e-commerce platforms.