Badoo.com was hacked
Preface Badoo.com was hacked. LeakedSource has obtained and added a copy of this data to its...
VK.com was hacked
Preface VK.com was hacked. LeakedSource has obtained and added a copy of this data to its...
Gaming company Evony was hacked for a total of 33,407,472 users from its main game database in June of 2016
Table of Contents Summary Passwords Emails More databases Summary Gaming company Evony was...
Nearly 100 million records have been leaked online in yet another “mega breach”, this time from the website Rambler.ru
Table of Contents Summary Passwords Misc Summary Nearly 100 million records have been leaked...
Well known San-Francisco based “drag-n-drop” website creator Weebly.com had information on 43,430,316 users leaked from its main database in February of 2016
Table of Contents Important Updates Summary Passwords Emails More databases Important Updates...
Mate1.com was hacked on October 17th, 2015 and a copy of profile data for 27,403,958 accounts has been obtained by LeakedSource.
Preface Mate1.com was hacked on October 17th, 2015 and a copy of profile data for 27,403,958...
Sexual secrets for hundreds of millions exposed in largest hack of 2016
Friend Finder Network Inc is a company that operates a wide range of 18+ services and was hacked in October of 2016 for over 400 million accounts representing 20 years of customer data which makes it by far the largest breach we have ever seen -- MySpace gets 2nd place at 360 million. This event also marks the second time Friend Finder has been breached in two years, the first being around May of 2015.
iMesh.com (now defunct) was hacked on September 22nd, 2013
Preface iMesh.com (now defunct) was hacked on September 22nd, 2013. LeakedSource has obtained...
MySpace.com was hacked on June 11th, 2013
Preface MySpace.com was hacked on June 11th, 2013. LeakedSource has obtained and added a copy...
Zen-Pictures
In March 2018, Zen-Pictures, a Japanese niche studio that produces and distributes superheroine-action drama movies—typically featuring anime-style costumes, tokusatsu effects, and adult collectible videos—suffered a data breach that affected 135,355 users. The compromised data included email addresses and MD5 password hashes. Users should update their passwords on any accounts using similar credentials and be cautious with platforms still using outdated encryption methods like MD5.
VIPCHECKER
In 2020, VIPCHECKER, a Russian-based specialized account-checking service for Minecraft, suffered a data breach that impacted 986,455 users. The compromised data included usernames and passwords stored in both plaintext and SHA-1 hashed formats, significantly increasing the risk of account takeover and credential stuffing attacks.
Allp2ptv
In August 2018, Allp2ptv, a now-defunct Chinese all-sided live P2P sports TV schedule site offering comprehensive programming information for P2P online TV, suffered a data breach that affected 100,328 users. The compromised data included email addresses and MD5 password hashes. Users should update any reused credentials and avoid using services that rely on insecure hashing methods like MD5.
USTVNow
In August 2018, USTVNow, a U.S.-based live TV streaming service designed primarily for American expatriates, military personnel abroad, and patriotic viewers to access U.S. broadcast and cable channels legally, suffered a data breach that affected 474,077 users. The compromised data included email addresses and plaintext passwords. Users should update their passwords immediately and avoid using the same credentials across multiple platforms to reduce the risk of further compromise.
Akpr.ru
In August 2018, Akpr.ru, a Russian B2B agency based in Moscow, suffered a data breach that affected 108,624 users. The compromised data included email addresses and MD5 password hashes. Users should change any reused passwords and seek out services that implement modern, secure password hashing algorithms to better protect their credentials.
Pleqq
In June 2025, a Single Sign-On (SSO) login portal for Pleqq, a Netherlands-based service, suffered a data breach that impacted 218,423 users. The compromised data included email addresses, usernames, pHpass password hashes, and dates, potentially allowing attackers to correlate credentials or attempt brute-force cracking of hashed passwords.
Work.shop
In August 2018, Work.shop, a subdomain under the main Shop.com domain owned by Market America, Inc.—a U.S.-based e-commerce and cashback platform—suffered a data breach that affected 62,690 users. The compromised data included email addresses and plaintext passwords. Users should immediately change any reused credentials and be cautious of phishing attempts following such exposures.
infoBiker
In November 2022, infoBiker, an Argentinan news and community hub for cycling enthusiasts, suffered a data breach impacting approximately 32,000 records. The exposed data included over 19,000 unique email addresses, phone numbers, full names, and MD5 hashed passwords. Proper cybersecurity measures are essential to protect sensitive user information and prevent future breaches from occurring.
Seer
In 2018, Seer suffered a data breach affecting approximately 69 thousand unique records. The exposed data includes email addresses and plaintext passwords. Implementing strong encryption and secure storage practices is crucial to prevent unauthorized access and protect sensitive data.
MZ Online Market
In August 2024, MZ Online Market, a general e-commerce platform based in Myanmar, suffered a data breach that impacted 8,320 users. The compromised data included email addresses, full names, and physical addresses, potentially exposing users to identity theft and targeted scams. This incident highlights the critical need for robust cybersecurity measures to protect organizational and user information in national industry platforms.
Applebee Books
In August 2018, Applebee Books, a South Korean e-commerce portal and publisher specializing in children’s educational books and toys, suffered a data breach that affected 63,728 users. The compromised data included email addresses and MySQL password hashes. Users should update any passwords reused on other services and be aware that weak or outdated hashing algorithms can still expose accounts to cracking attempts.
Abcguionistas
In August 2018, Abcguionistas, a Spain-based international screenwriting community and training platform headquartered in Madrid, suffered a data breach that affected 100,124 users. The compromised data included email addresses and plaintext passwords. Users should immediately update any reused passwords and adopt stronger credentials for future use.
Infiniton
In March 2023, Infiniton, a Spanish e-commerce platform specializing in home furniture and appliances, suffered a data breach affecting approximately 29,000 records. The exposed data includedne nearly 28,000 unique email addresses, full names, and genders. Proper cybersecurity measures are crucial to protect sensitive user information and safeguard online platforms from potential breaches like this one.
Anhui Zhongyi Enterprise Management
In August 2018, Anhui Zhongyi Enterprise Management, a corporate site for a Chinese life-services management company in Anhui, suffered a data breach that affected 207,500 users. The compromised data included email addresses and MD5 password hashes. To stay secure, users should replace any reused credentials and prioritize platforms that follow modern encryption practices.
Norwegian Cruise Line
In August 2018, Norwegian Cruise Line, specifically the regional European (primarily German) travel-agent portal, suffered a data breach that affected 31,872 users. The compromised data included email addresses and MD5 password hashes. Users should update passwords and avoid using platforms that store data with outdated hashing algorithms like MD5.
Academy Fence Company
In August 2018, Academy Fence Company, a family-owned fencing supply retailer and installation business based in Orange, New Jersey, USA, suffered a data breach that affected 33,264 users. The compromised data included email addresses and MD5 password hashes. Since MD5 is outdated and insecure, affected users should update their passwords and ensure stronger protection across other platforms.
Poloniex
In April 2020, Poloniex, a US based cryptocurrency exchange and fintech platform, suffered a data breach affecting nearly 1 million records. The exposed data includes over 950,000 unique email addresses and plaintext passwords. Breaches involving financial platforms pose significant risks of fraud and unauthorized account access. Strong encryption and strict cybersecurity protocols are vital to protect user assets and maintain trust.
I Need a Job
In August 2022, I Need a Job, a US-based job-seeking platform, suffered a data breach affecting approximately 35,000 records. The exposed data included roughly 1500 unique email addresses, phone numbers, full names, and MD5 hashed passwords. Proper cybersecurity measures are crucial to protect sensitive user information and safeguard online platforms from potential breaches like this one.
IndianAthletics
In February 2023, the website for the Athletics Federation of India suffered a data breach impacting approximately 18 million records. The exposed data included nearly 192,000 unique email addresses, usernames, full names, phone numbers, IP addresses, physical addresses, and either PHPass hashed, bcrypt hashed, or plaintext passwords. Proper cybersecurity measures are crucial to protect sensitive user information and safeguard online platforms from potential breaches like this one.
RedLaser
In July 2024, RedLaser, a Bermuda-based retailer specializing in office supplies and computer equipment, suffered a data breach that impacted 1,312 users. The compromised data included email addresses, phone numbers, full names, geographic locations, physical addresses, and dates, exposing a broad set of personally identifiable information. This incident highlights the critical need for robust cybersecurity measures to protect organizational and user information in national industry platforms.