Has Your Email Been Compromised?
Check and see if your email has been involved in a databreach
All information submitted is Private and Secure. We do not sell or share email addresses. 
Dennis Kirk
In October 2024, approximately 20GB of data, including 1.3 million unique email addresses from the motorcycle supplies retailer Dennis Kirk, was circulated online. The data, dating back to September 2021, also included customer names, phone numbers, geographic locations, postcodes, and purchase histories. Despite multiple attempts to contact the company, Dennis Kirk did not respond to inquiries regarding the breach. This event underscores the importance of implementing strong cybersecurity measures to safeguard customer data and promptly addressing incidents to mitigate potential harm.
PKMN.NET
In August 2019, the Pokémon fan community PKMN.NET experienced a data breach that affected approximately 53,600 users. The compromised data included usernames, email addresses, and passwords stored as SMF (Simple Machines Forum) hashes. This incident highlights the vulnerabilities in outdated hashing algorithms and the need for stronger security practices to protect user data.
LeakBase 8.7M ULP by firegoon
On April 10, 2024, a stealer log titled 8.7M ULP was posted on a popular hacking forum, containing approximately 9 million records. The log exposed around 1 million unique email addresses, plaintext passwords, and homepage URLs. This incident highlights the growing prevalence of credential theft and reinforces the importance of implementing strong cybersecurity measures to protect sensitive data.
Tibber
In November 2024, the Norwegian renewable electricity provider Tibber experienced a data breach that affected 243,000 users. The compromised information included email addresses, names, usernames, locations, and dates. This breach highlights the critical need for strong cybersecurity measures, especially for companies in the energy sector, to safeguard sensitive customer data and maintain trust.
LeakBase 11Kk ULP (part 2) by firegoon
On December 7, 2024, a stealer log titled 11Kk Url:log:pass was posted on a popular hacking forum, containing approximately 11 million records. The log exposed 2.14 million unique email addresses, plaintext passwords, and homepage URLs. This breach highlights the ongoing risks posed by data theft and the necessity for individuals and organizations to implement stronger cybersecurity measures.
EpicBot 2019
In September 2019, the RuneScape bot provider EpicBot suffered a significant data breach affecting 817,000 subscribers. The stolen data, later shared on a popular hacking forum, included usernames, email addresses, IP addresses, and passwords stored as either salted MD5 or bcrypt hashes. This breach highlights the critical importance of securing user information with strong encryption methods and regularly updating security protocols to defend against potential threats.
LeakBase 39M ULP by iyaddz19
On March 31, 2024, a stealer log titled 39M ULP was posted on a popular hacking forum, containing approximately 39 million records. The log exposed around 5.1 million unique email addresses, plaintext passwords, and homepage URLs. This incident highlights the ongoing importance of implementing robust cybersecurity measures to protect sensitive user data from unauthorized exposure.
Cracked Benczus Logs 58M ULP by Benczus
On June 4, 2024, a stealer log titled Benczus Logs 58M ULP was posted on a hacking forum, containing approximately 58 million records. The log exposed around 11 million unique email addresses, plaintext passwords, and homepage URLs. This incident underscores the critical need for organizations and individuals to strengthen cybersecurity practices to prevent unauthorized data access and breaches.
PoinCampus
In November 2024, the Korean online educational platform PoinCampus suffered a data breach affecting 89,703 users. The exposed data included names, nicknames, email addresses, sign-up routes, phone numbers, dates of birth, genders, enrollment dates and times, and other personal information. This incident underscores the importance of robust cybersecurity measures, particularly for educational platforms handling sensitive user data, to protect privacy and prevent unauthorized access.
Cracked 10M ULP (part 3) by businessmenD
On November 29, 2024, a stealer log titled [✨FREE ✨] ✨10 Million lines / Url Login Pass / ULP (29/11) was posted on a popular hacking forum, containing approximately 10 million records. The log exposed 2.46 million unique email addresses, plaintext passwords, and homepage URLs. This breach highlights the ongoing risks posed by data theft and the necessity for individuals and organizations to implement stronger cybersecurity measures.
MIT Technology Review
In November 2024, a data breach affected a third-party contractor for MIT's Technology Review, exposing the personal information of 290,000 individuals. The compromised data included full names, email addresses, activity dates, and educational backgrounds. This incident underscores the critical need for stringent cybersecurity measures, especially when handling sensitive information through external vendors, to protect against data exposure and maintain trust.
Cracked 10M ULP (part 4) by businessmenD
On November 29, 2024, a stealer log titled [✨FREE ✨] ✨10 Million lines / Url Login Pass / ULP (29/11) was posted on a popular hacking forum, containing approximately 10 million records. The log exposed 1.97 million unique email addresses, plaintext passwords, and homepage URLs. This breach highlights the ongoing risks posed by data theft and the necessity for individuals and organizations to implement stronger cybersecurity measures.
Cracked 10M ULP (part 5) by businessmenD
On November 30, 2024, a stealer log titled [✨FREE ✨] ✨10 Million lines / Url Login Pass / ULP (30/11) was posted on a popular hacking forum, containing approximately 10 million records. The log exposed 2.21 million unique email addresses, plaintext passwords, and homepage URLs. This breach highlights the ongoing risks posed by data theft and the necessity for individuals and organizations to implement stronger cybersecurity measures.
Payday Loans
In June 2023, a leaked dataset from the cash-advance loan service Payday Loans was published on a well-known hacking forum. The compromised data, reportedly originating from 2020, included sensitive information such as email addresses, full names, IP addresses, dates of birth, physical addresses, banking details, and Social Security numbers. This incident highlights the severe risks associated with insufficient data security, especially in sectors handling sensitive financial and personal information.
Consorcio Credicard, C.A.
In July 2024, Consorcio Credicard, C.A., a leading payment processing company for banks and financial institutions in Venezuela, experienced a data breach affecting 247,000 users. The breach exposed sensitive information, including full names, national ID numbers (Cedula), account IDs, nationalities, email addresses, phone numbers, bank transactions, products, contracts with partner organizations (such as Bancaribe, Bancamiga, Banco del Tesoro, Banfanb, Mi Banco, and Bancrecer), and business-related data. This incident underscores the pressing need for robust cybersecurity measures to protect financial and personal data, especially in sectors that handle sensitive payment information.
Angel One
In April 2023, Mumbai-based stock broking firm Angel One, formerly Angel Broking Ltd, experienced a data breach impacting nearly 8 million customers. The compromised data, which included email addresses, full names, phone numbers, birthdays, physical addresses, and bank information, was later posted on a popular hacking forum in July 2024. This breach emphasizes the critical need for financial institutions to implement stringent data protection measures to safeguard sensitive customer information.
LeakBase 15Kk ULP #3 by firegoon
On April 26, 2024, a stealer log titled 15Kk ULP was posted on a popular hacking forum, containing approximately 15 million records. The log revealed around 1.8 million unique email addresses, plaintext passwords, and homepage URLs. This incident underscores the critical need for robust cybersecurity measures to prevent the misuse of sensitive data.
LeakBase Sesupe 200M ULP 2 by farmagol
On April 5, 2024, a stealer log titled 200M ULP 2 was posted on a popular hacking forum, comprising approximately 200 million lines. The log disclosed roughly 28.2 million unique email addresses, plaintext passwords, and homepage URLs. Such breaches highlight the importance of implementing strong cybersecurity defenses to safeguard personal and organizational data.
LeakBase Sesupe 200M ULP by farmagol
On April 5, 2024, a stealer log titled 200M ULP was posted on a prominent hacking forum, containing approximately 200 million lines. The log exposed roughly 30.5 million unique email addresses, plaintext passwords, and homepage URLs. This event underscores the urgent need for robust cybersecurity measures to protect users' sensitive information from falling into the wrong hands.
Cartao CredBlack
In October 2024, the Brazilian website Cartao CredBlack, which promotes premium credit cards, suffered a data breach that impacted 1.4 million users. The compromised data included email addresses, full names, identification documents, birthdates, genders, and additional personal information. This breach highlights the critical importance of implementing comprehensive cybersecurity measures to safeguard user data and prevent unauthorized access to sensitive information, particularly for platforms handling financial services.
Unique fingerprints of over 15 billion email addresses
The Worlds Largest Breach Database
Over 15 Billion Records
Our Data Collection Process
Our lives rely on technology. We use it to do our jobs, entertain ourselves and stay connected. As technology continues to grow, our reliance on that technology does as well.
An organization’s employee and/or customer databases are either stolen or leaked by a malicious party
The compromised data is placed on the dark web where malicious threats and attackers obtain the data
HEROIC threat analysts discover the leaked and compromised data in hacker forums, paste bins, etc.
The data is then verified, cleaned and uploaded into HEROIC DarkHiveâ„¢ for search and reporting
Users and organizations using HEROIC receive account alerts and other remediation actions
