Tiago2024180/eyewebdataset huggingface dataset:
Guns and Robots (play-gar.com)
Breach date: 2016-04-01
Accounts affected: 143569
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In approximately April 2016, the gaming website Guns and Robots suffered a data breach resulting in the exposure of 143k unique records. The data contained email and IP addresses, usernames and SHA-1 password hashes. The site was previously reported as compromised on the Vigilante.pw breached database directory.
Guns.com (guns.com)
Breach date: 2021-01-12
Accounts affected: 375928
Data exposed: Dates of birth, Email addresses, Names, Partial credit card data, Passwords, Phone numbers, Physical addresses, Purchases
In January 2021, the firearms website guns.com suffered a data breach. The breach exposed 376k unique email addresses along with names, phone numbers, physical addresses, gun purchases, partial credit card data, dates of birth and passwords stored as bcrypt hashes.
Guntrader (guntrader.uk)
Breach date: 2021-07-17
Accounts affected: 112031
Data exposed: Browser user agent details, Email addresses, Geographic locations, IP addresses, Names, Passwords, Phone numbers, Physical addresses, Salutations
In July 2021, the United Kingdom based website Guntrader suffered a data breach that exposed 112k unique email addresses. Extensive personal information was also exposed including names, phone numbers, geolocation data, IP addresses and various physical address attributes (cities for all users, complete addresses for some). Passwords stored as bcrypt hashes were also exposed.
hackforums.net (hackforums.net)
Breach date: 2011-06-25
Accounts affected: 191540
Data exposed: Dates of birth, Email addresses, Instant messenger identities, IP addresses, Passwords, Social connections, Spoken languages, Time zones, User website URLs, Usernames, Website activity
In June 2011, the hacktivist group known as "LulzSec" leaked one final large data breach they titled "50 days of lulz". The compromised data came from sources such as AT&T, Battlefield Heroes and the hackforums.net website. The leaked Hack Forums data included credentials and personal information of nearly 200,000 registered forum users.
Hacking Team (hackingteam.com)
Breach date: 2015-07-06
Accounts affected: 32310
Data exposed: Email addresses, Email messages
In July 2015, the Italian security firm Hacking Team suffered a major data breach that resulted in over 400GB of their data being posted online via a torrent. The data searchable on "Have I Been Pwned?" is from 189GB worth of PST mail folders in the dump. The contents of the PST files is searchable on Wikileaks.
Hakko Corporation (hakko.com)
Breach date: 2019-03-28
Accounts affected: 9665
Data exposed: Dates of birth, Email addresses, Genders, Names, Passwords, Phone numbers, Physical addresses, Usernames
In March 2019, the Japanese solder-related business Hakko Corporation suffered a data breach. The incident exposed almost 10k customer records including email and physical addresses, phone numbers, names, usernames, genders, dates of birth and plain text passwords.
Hathway (hathway.com)
Breach date: 2023-12-17
Accounts affected: 4670080
Data exposed: Device information, Email addresses, IP addresses, Names, Passwords, Phone numbers, Physical addresses, Salutations, Support tickets
In December 2023, hundreds of gigabytes of data allegedly taken from Indian ISP and digital TV provider Hathway appeared on a popular hacking website. The incident exposed extensive personal information including 4.7M unique email addresses along with names, physical and IP addresses, phone numbers, password hashes and support ticket logs.
HauteLook (hautelook.com)
Breach date: 2018-08-07
Accounts affected: 28510459
Data exposed: Dates of birth, Email addresses, Genders, Geographic locations, Names, Passwords
In mid-2018, the fashion shopping site HauteLook was among a raft of sites that were breached and their data then sold in early-2019. The data included over 28 million unique email addresses alongside names, genders, dates of birth and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com.
Have Fun Teaching (havefunteaching.com)
Breach date: 2021-08-15
Accounts affected: 27126
Data exposed: Browser user agent details, Email addresses, IP addresses, Names, Payment methods, Physical addresses, Purchases
In August 2021, the teaching resources website Have Fun Teaching suffered a data breach that leaked 80k WooCommerce transactions which were later posted to a popular hacking forum. The data contained 27k unique email addresses along with physical and IP addresses, names, payment methods and the item purchased. Have Fun Teaching is aware of the incident.
Havenly (havenly.com)
Breach date: 2020-06-25
Accounts affected: 1369180
Data exposed: Email addresses, Geographic locations, Names, Passwords, Phone numbers
In June 2020, the interior design website Havenly suffered a data breach which impacted almost 1.4 million members of the service. The exposed data included email addresses, names, phone numbers, geographic locations and passwords stored as SHA-1 hashes, all of which was subsequently shared extensively throughout online hacking communities. The data was provided to HIBP by dehashed.com.
HDB Financial Services (hdbfs.com)
Breach date: 2023-02-22
Accounts affected: 1658750
Data exposed: Dates of birth, Email addresses, Genders, Geographic locations, Loan information, Names, Phone numbers
In March 2023, the Indian non-bank lending unit HDB Financial Services suffered a data breach that disclosed over 70M customer records. Containing 1.6M unique email addresses, the breach also disclosed names, dates of birth, phone numbers, genders, post codes and loan information belonging to the customers.
Health Now Networks (healthnow.co)
Breach date: 2017-03-25
Accounts affected: 321920
Data exposed: Dates of birth, Email addresses, Genders, Health insurance information, IP addresses, Names, Personal health data, Phone numbers, Physical addresses, Security questions and answers, Social connections
In March 2017, the telemarketing service Health Now Networks left a database containing hundreds of thousands of medical records exposed. There were over 900,000 records in total containing significant volumes of personal information including names, dates of birth, various medical conditions and operator notes on the individuals' health. The data included over 320k unique email addresses.
HeatGames (heatgames.me)
Breach date: 2021-06-12
Accounts affected: 647896
Data exposed: Email addresses, Geographic locations, IP addresses, Passwords
In June 2021, the (now defunct) gaming website HeatGames suffered a data breach that was later redistributed as part of a larger corpus of data. The breach exposed almost 650k unique email addresses along with IP addresses, country and salted MD5 password hashes.
Hello Cake (hellocake.com)
Breach date: 2025-07-25
Accounts affected: 22907
Data exposed: Dates of birth, Email addresses, Names, Phone numbers, Physical addresses, Purchases
In July 2025, the sexual healthcare product maker Hello Cake suffered a data breach. The data was subsequently posted on a public hacking forum and included 23k unique email addresses along with names, phone numbers, physical addresses, dates of birth and purchases.
Hemmakväll (hemmakvall.se)
Breach date: 2015-07-08
Accounts affected: 47297
Data exposed: Email addresses, Names, Passwords, Phone numbers, Physical addresses
In July 2015, the Swedish video store chain Hemmakväll was hacked and nearly 50k records dumped publicly. The disclosed data included various attributes of their customers including email and physical addresses, names and phone numbers. Passwords were also leaked, stored with a weak MD5 hashing algorithm.
hemmelig.com (hemmelig.com)
Breach date: 2011-12-21
Accounts affected: 28641
Data exposed: Email addresses, Genders, Nicknames, Partial dates of birth, Passwords, Usernames
In December 2011, Norway's largest online sex shop hemmelig.com was hacked by a collective calling themselves "Team Appunity". The attack exposed over 28,000 usernames and email addresses along with nicknames, gender, year of birth and unsalted MD5 password hashes.
Heroes of Gaia (heroesofgaia.com)
Breach date: 2013-01-04
Accounts affected: 179967
Data exposed: Browser user agent details, Email addresses, IP addresses, Usernames, Website activity
In early 2013, the online fantasy multiplayer game Heroes of Gaia suffered a data breach. The newest records in the data set indicate a breach date of 4 January 2013 and include usernames, IP and email addresses but no passwords.
Heroes of Newerth (heroesofnewerth.com)
Breach date: 2012-12-17
Accounts affected: 8089103
Data exposed: Email addresses, Passwords, Usernames
In December 2012, the multiplayer online battle arena game known as Heroes of Newerth was hacked and over 8 million accounts extracted from the system. The compromised data included usernames, email addresses and passwords.
HiAPK (hiapk.com)
Breach date: 2014-01-01
Accounts affected: 13873674
Data exposed: Email addresses, Passwords, Usernames
In approximately 2014, it's alleged that the Chinese Android store known as HIAPK suffered a data breach that impacted 13.8 million unique subscribers. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains usernames, email addresses and salted MD5 password hashes and was provided to HIBP by white hat security researcher and data analyst Adam Davies. Read more about Chinese data breaches in Have I Been Pwned.
Hjedd (hjedd.com)
Breach date: 2022-07-18
Accounts affected: 13204029
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In July 2022, the Chinese adult website Hjedd was found to be leaking more than 13M customer records which subsequently appeared on a popular hacking forum. The exposed data included email and IP addresses, usernames and passwords stored as bcrypt hashes.
HLTV (hltv.org)
Breach date: 2016-06-19
Accounts affected: 611070
Data exposed: Email addresses, Names, Passwords, Usernames, Website activity
In June 2016, the "home of competitive Counter Strike" website HLTV was hacked and 611k accounts were exposed. The attack led to the exposure of names, usernames, email addresses and bcrypt hashes of passwords.
Home Chef (homechef.com)
Breach date: 2020-02-10
Accounts affected: 8815692
Data exposed: Email addresses, Geographic locations, IP addresses, Names, Partial credit card data, Passwords, Phone numbers
In early 2020, the food delivery service Home Chef suffered a data breach which was subsequently sold online. The breach exposed the personal information of almost 9 million customers including names, IP addresses, post codes, the last 4 digits of credit card numbers and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com.
HomeRefill (homerefill.com.br)
Breach date: 2020-04-02
Accounts affected: 187457
Data exposed: Dates of birth, Email addresses, Names, Passwords, Phone numbers
In April 2020, now defunct Brazilian e-commerce platform HomeRefill suffered a data breach that was later redistributed as part of a larger corpus of data. The data included 187k unique email addresses along with names, phone numbers, dates of birth and salted password hashes.
HongFire (hongfire.com)
Breach date: 2015-03-01
Accounts affected: 999991
Data exposed: Dates of birth, Email addresses, IP addresses, Passwords, Usernames
In March 2015, the anime and manga forum HongFire suffered a data breach. The hack of their vBulletin forum led to the exposure of 1 million accounts along with email and IP addresses, usernames, dates of birth and salted MD5 passwords.
Hookers.nl (hookers.nl)
Breach date: 2019-10-10
Accounts affected: 290955
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In October 2019, the Dutch prostitution forum Hookers.nl suffered a data breach which exposed the personal information of sex workers and their customers. The IP and email addresses, usernames and either bcrypt or salted MD5 password hashes of 291k members were accessed via an unpatched vulnerability in the vBulletin forum software.
Hopamedia ()
Breach date: 2020-08-30
Accounts affected: 23835870
Data exposed: Email addresses, Geographic locations, Names, Phone numbers, Telecommunications carrier
In 2024, data relating to an unknown service referred to as "Hopamedia" and dating back to 2020 appeared in a publicly exposed database. The data included almost 24M records of email address, name, phone number, the country of the individual and their telecommunications carrier.
Horse Isle (horseisle.com)
Breach date: 2020-09-19
Accounts affected: 27786
Data exposed: Email addresses, Genders, IP addresses, Names, Passwords, Purchases, Usernames
In June 2020 then again in September that same year, Horse Isle "The Secrent Land of Horses" suffered a data breach. The incident exposed 28k unique email addresses along with names, usernames, IP addresses, genders, purchases and plain text passwords. The system also stored and exposed failed password attempts for each user with the password retained in plain text.
Hot Topic (hottopic.com)
Breach date: 2024-10-19
Accounts affected: 56904909
Data exposed: Dates of birth, Email addresses, Genders, Names, Partial credit card data, Phone numbers, Physical addresses, Purchases, Salutations
In October 2024, retailer Hot Topic suffered a data breach that exposed 57 million unique email addresses. The impacted data also included physical addresses, phone numbers, purchases, genders, dates of birth and partial credit data containing card type, expiry and last 4 digits.
HoundDawgs (hounddawgs.org)
Breach date: 2017-12-30
Accounts affected: 45701
Data exposed: Email addresses, IP addresses, Passwords, Website activity
In December 2017, the Danish torrent tracker known as HoundDawgs suffered a data breach. More than 55GB of data was dumped publicly and whilst there was initially contention as to the severity of the incident, the data did indeed contain more than 45k unique email addresses complete extensive logs of torrenting activity, IP addresses and SHA1 passwords.
Houzz (houzz.com)
Breach date: 2018-05-23
Accounts affected: 48881308
Data exposed: Email addresses, Geographic locations, IP addresses, Names, Passwords, Social media profiles, Usernames
In mid-2018, the housing design website Houzz suffered a data breach. The company learned of the incident later that year then disclosed it to impacted members in February 2019. Almost 49 million unique email addresses were in the breach alongside names, IP addresses, geographic locations and either salted hashes of passwords or links to social media profiles used to authenticate to the service. The data was provided to HIBP by dehashed.com.
HTC Mania (htcmania.com)
Breach date: 2020-01-04
Accounts affected: 1488089
Data exposed: Dates of birth, Email addresses, Historical passwords, IP addresses, Passwords, Usernames
In January 2020, the Spanish mobile phone forum HTC Mania suffered a data breach of the vBulletin based site. The incident exposed 1.5M member email addresses, usernames, IP addresses, dates of birth and salted MD5 password hashes and password histories. Data from the breach was subsequently redistributed on popular hacking websites.
HTH Studios (hthstudios.com)
Breach date: 2018-08-24
Accounts affected: 411755
Data exposed: Browser user agent details, Dates of birth, Email addresses, IP addresses, Names, Phone numbers, Physical addresses, Purchases, Usernames
In August 2018, the adult furry interactive game creator HTH Studios suffered a data breach impacting multiple repositories of customer data. Several months later, the data surfaced on a popular hacking forum and included 411k unique email addresses along with physical and IP addresses, names, orders, salted SHA-1 and salted MD5 hashes. HTH Studios is aware of the incident.
Hub4Tech (hub4tech.com)
Breach date: 2017-01-01
Accounts affected: 36916
Data exposed: Email addresses, Passwords
On an unknown date in approximately 2017, the Indian training and assessment service known as Hub4Tech suffered a data breach via a SQL injection attack. The incident exposed almost 37k unique email addresses and passwords stored as unsalted MD5 hashes. No response was received from Hub4Tech when contacted about the incident.
HuntStand (huntstand.com)
Breach date: 2024-03-08
Accounts affected: 2795947
Data exposed: Dates of birth, Email addresses, Geographic locations, Names
In March 2024, millions of records scraped from the hunting and land management service HuntStand were publicly posted to a popular hacking forum. The data included 2.8M unique email addresses with many records also containing name, date of birth and country.
Hurb (hurb.com)
Breach date: 2019-03-14
Accounts affected: 20727771
Data exposed: Dates of birth, Email addresses, IP addresses, Names, Passwords, Phone numbers, Social media profiles
In approximately March 2019, the online Brazilian travel agency Hurb (formerly Hotel Urbano) suffered a data breach. The data subsequently appeared online for download the following year and included over 20 million customer records with email and IP addresses, names, dates of birth, phone numbers and passwords stored as unsalted MD5 hashes. The data was provided to HIBP by dehashed.com.
Husky Owners (husky-owners.com)
Breach date: 2024-07-04
Accounts affected: 16502
Data exposed: Dates of birth, Email addresses, Time zones, Usernames
In July 2024, the Husky Owners forum website was defaced and linked to a breach of user data containing 16k records. The exposed data included usernames, email addresses, dates of birth and time zones.
iD Tech (idtech.com)
Breach date: 2023-01-03
Accounts affected: 415121
Data exposed: Dates of birth, Email addresses, Names, Passwords
In February 2023, the tech camps for kids service iD Tech had almost 1M records posted to a popular hacking forum. The data included 415k unique email addresses, names, dates of birth and plain text passwords which appear to have been breached in the previous month. iD Tech did not respond to multiple attempts to report the incident.
IDC Games (idcgames.com)
Breach date: 2021-03-15
Accounts affected: 3966871
Data exposed: Email addresses, Passwords, Usernames
In March 2021, 4 million records sourced from IDC Games were shared on a public hacking forum. The data included usernames, email addresses and passwords stored as salted MD5 hashes.
i-Dressup (i-dressup.com)
Breach date: 2016-07-15
Accounts affected: 2191565
Data exposed: Email addresses, Passwords
In June 2016, the teen social site known as i-Dressup was hacked and over 2 million user accounts were exposed. At the time the hack was reported, the i-Dressup operators were not contactable and the underlying SQL injection flaw remained open, allegedly exposing a total of 5.5 million accounts. The breach included email addresses and passwords stored in plain text.
IIMJobs (iimjobs.com)
Breach date: 2018-12-31
Accounts affected: 4216063
Data exposed: Dates of birth, Email addresses, Geographic locations, IP addresses, Job applications, Job titles, Names, Passwords, Phone numbers
In December 2018, the Indian job portal IIMJobs suffered a data breach that exposed 4.1 million unique email addresses. The data also included names, phone numbers, geographic locations, dates of birth, job titles, job applications and cover letters plus passwords stored as unsalted MD5 hashes. The data was provided to HIBP by dehashed.com.
ILikeCheats (ilikecheats.net)
Breach date: 2014-10-18
Accounts affected: 188847
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In October 2014, the game cheats website known as ILikeCheats suffered a data breach that exposed 189k accounts. The vBulletin based forum leaked usernames, IP and email addresses and weak MD5 hashes of passwords. The data was provided with support from dehashed.com.
Imavex (imavex.com)
Breach date: 2021-08-20
Accounts affected: 878209
Data exposed: Email addresses, Genders, Names, Partial credit card data, Passwords, Phone numbers, Physical addresses, Purchases, Usernames
In August 2021, the website development company Imavex suffered a data breach that exposed 878 thousand unique email addresses. The data included user records containing names, usernames and password material with some records also containing genders and partial credit card data, including the last 4 digits of the card and expiry date. Hundreds of thousands of form submissions and orders via Imavex customers were also exposed and contained further personal information of submitters and the contents of the form. The compromised system was subsequently sunset in January 2024 and all customer data impacted by the incident was permanently deleted.
iMenu360 (imenu360.com)
Breach date: 2022-08-11
Accounts affected: 3425860
Data exposed: Email addresses, Names, Phone numbers, Physical addresses
In approximately late 2022, 3.4M customer records from iMenu360 ("The world's #1 most trusted online ordering platform") were exposed. The data appeared to be from ordering systems using the platform and contained email and physical addresses, latitudes and longitudes, names and phone numbers. Numerous attempts were made to contact iMenu360 about the incident between April and August 2023, but no response was received.
iMesh (imesh.com)
Breach date: 2013-09-22
Accounts affected: 49467477
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In September 2013, the media and file sharing client known as iMesh was hacked and approximately 50M accounts were exposed. The data was later put up for sale on a dark market website in mid-2016 and included email and IP addresses, usernames and salted MD5 hashes.
imgur (imgur.com)
Breach date: 2013-09-01
Accounts affected: 1749806
Data exposed: Email addresses, Passwords
In September 2013, the online image sharing community imgur suffered a data breach. A selection of the data containing 1.7 million email addresses and passwords surfaced more than 4 years later in November 2017. Although imgur stored passwords as SHA-256 hashes, the data in the breach contained plain text passwords suggesting that many of the original hashes had been cracked. imgur advises that they rolled over to bcrypt hashes in 2016.
IndiaMART (indiamart.com)
Breach date: 2021-05-23
Accounts affected: 20154583
Data exposed: Email addresses, Names, Phone numbers, Physical addresses
In August 2021, 38 million records from Indian e-commerce company IndiaMART were found being traded on a popular hacking forum. Dated several months earlier, the data included over 20 million unique email addresses alongside names, phone numbers and physical addresses. It's unclear whether IndiaMART intentionally exposed the data attributes as part of the intended design of the platform or whether the data was obtained by exploiting a vulnerability in the service.
Indian Railways (indianrails.in)
Breach date: 2019-10-28
Accounts affected: 583377
Data exposed: Email addresses, Passwords, Usernames
In November 2019, the website for Indian Rail left more than 2M records exposed on an unprotected Firebase database instance. The exposed data included 583k unique email addresses alongside usernames and passwords stored in plain text.
IndiHome (indihome.co.id)
Breach date: 2019-11-01
Accounts affected: 12629245
Data exposed: Device information, Email addresses, Genders, Geographic locations, IP addresses, Names
In mid-2021, reports emerged of a data breach of Indonesia's telecommunications company, IndiHome. Over 26M rows of data alleged to have been sourced from the company was posted to a popular hacking forum and contained 12.6M unique email addresses alongside names, IP addresses, genders and geographic locations. The most recent data was stamped as being recorded in November 2019.
InflateVids (tube.inflatevids.xyz)
Breach date: 2023-12-12
Accounts affected: 13405
Data exposed: Email addresses, Genders, IP addresses, Passwords, Usernames
In December 2023, the inflatable and balloon fetish videos website InflateVids suffered a data breach. The incident exposed over 13k unique email addresses alongside usernames, IP addresses, genders and SHA-1 password hashes.