Tiago2024180/eyewebdataset huggingface dataset:
Toy Battles (toybattles.net)
Breach date: 2026-02-06
Accounts affected: 1017
Data exposed: Chat logs, Email addresses, IP addresses, Usernames
In February 2026, the online gaming community Toy Battles suffered a data breach. The incident exposed 1k unique email addresses alongside usernames, IP addresses and chat logs. Following the breach, Toy Battles self-submitted the data to Have I Been Pwned.
Tracki (tracki.com)
Breach date: 2024-08-15
Accounts affected: 372557
Data exposed: Email addresses, Names
In August 2024, a slew of security vulnerabilities were identified with a conglomerate of online services which included the GPS tracking service Tracki. Multiple vulnerabilities exposed the personal records of 372k users of the service including names and email addresses.
Traderie (traderie.com)
Breach date: 2022-09-24
Accounts affected: 364898
Data exposed: Email addresses, IP addresses, Social media profiles, Usernames
In September 2022, the in-game trading marketplace Traderie suffered a data breach that exposed almost 400k records (this preceded a subsequent breach the following year). The incident exposed email and IP addresses, usernames and links to social media profiles.
Travel Oklahoma (travelok.com)
Breach date: 2020-12-17
Accounts affected: 637279
Data exposed: Age groups, Dates of birth, Email addresses, Genders, Names, Physical addresses
In December 2020, the Oklahoma state Tourism and Recreation Department suffered a data breach. The incident exposed 637k email addresses across a variety of tables including age ranges against brochure orders and dates of birth against contest entries. Genders, names and physical addresses were also exposed.
Travelio (travelio.com)
Breach date: 2021-11-23
Accounts affected: 471376
Data exposed: Auth tokens, Dates of birth, Email addresses, Names, Passwords, Phone numbers, Physical addresses
In November 2021, the Indonesian real estate website Travelio suffered a data breach that exposed over 470k customer accounts. The data included email addresses, names, password hashes, phone numbers and for some accounts, dates of birth, physical address and Facebook auth tokens.
Trello (trello.com)
Breach date: 2024-01-16
Accounts affected: 15111945
Data exposed: Email addresses, Names, Usernames
In January 2024, data was scraped from Trello and posted for sale on a popular hacking forum. Containing over 15M email addresses, names and usernames, the data was obtained by enumerating a publicly accessible resource using email addresses from previous breach corpuses. Trello advised that no unauthorised access had occurred.
Trik Spam Botnet ()
Breach date: 2018-06-12
Accounts affected: 43432346
Data exposed: Email addresses
In June 2018, the command and control server of a malicious botnet known as the "Trik Spam Botnet" was misconfigured such that it exposed the email addresses of more than 43 million people. The researchers who discovered the exposed Russian server believe the list of addresses was used to distribute various malware strains via malspam campaigns (emails designed to deliver malware).
Trillian (trillian.im)
Breach date: 2015-12-27
Accounts affected: 3827238
Data exposed: Dates of birth, Email addresses, IP addresses, Names, Passwords, Usernames
In December 2015, the instant messaging application Trillian suffered a data breach. The breach became known in July 2016 and exposed various personal data attributes including names, email addresses and passwords stored as salted MD5 hashes.
Troy Hunt's Mailchimp List (troyhunt.com)
Breach date: 2025-03-25
Accounts affected: 16627
Data exposed: Email addresses, Geographic locations, IP addresses
In March 2025, a phishing attack successfully gained access to Troy Hunt's Mailchimp account and automatically exported a list of people who had subscribed to the newsletter for his personal blog. The exported list contained 16k email addresses and other data automatically collected by Mailchimp including IP address and a derived latitude, longitude and time zone.
TruckersMP (truckersmp.com)
Breach date: 2016-02-25
Accounts affected: 83957
Data exposed: Email addresses, Passwords, Usernames
In February 2016, the online trucking simulator mod TruckersMP suffered a data breach which exposed 84k user accounts. In a first for "Have I Been Pwned", the breached data was self-submitted directly by the organisation that was breached itself.
TrueFire (truefire.com)
Breach date: 2020-02-21
Accounts affected: 599667
Data exposed: Account balances, Dates of birth, Email addresses, Names, Passwords, Phone numbers, Physical addresses, Usernames
In February 2020, the guitar tuition website TrueFire suffered a data breach which impacted 600k members. The breach exposed extensive personal information including names, email and physical addresses, account balances and unsalted MD5 password hashes. The data was provided to HIBP by dehashed.com.
Truth Finder (truthfinder.com)
Breach date: 2019-04-12
Accounts affected: 8159573
Data exposed: Email addresses, Names, Passwords, Phone numbers
In 2019, the public records search service TruthFinder suffered a data breach that later came to light in early 2023. The data included over 8M unique customer email addresses, names, phone numbers and passwords stored as scrypt hashes.
tumblr (tumblr.com)
Breach date: 2013-02-28
Accounts affected: 65469298
Data exposed: Email addresses, Passwords
In early 2013, tumblr suffered a data breach which resulted in the exposure of over 65 million accounts. The data was later put up for sale on a dark market website and included email addresses and passwords stored as salted SHA1 hashes.
Tuned Global (tunedglobal.com)
Breach date: 2016-03-16
Accounts affected: 985586
Data exposed: Email addresses, Names, Passwords, Phone numbers, Physical addresses
In January 2021, data from a number of breached services including Tuned Global were released to a public hacking forum. The breach appears to date back to 2016 and includes 985k records containing email addresses, names, a small number of physical addresses and phone numbers and passwords stored in plain text.
Tunngle (tunngle.net)
Breach date: 2016-07-01
Accounts affected: 8192928
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In 2016, the now defunct global LAN gaming network Tunngle suffered a data breach that exposed 8.2M unique email addresses. The compromised data also included usernames, IP addresses and passwords stored as salted MD5 hashes.
Twitter (twitter.com)
Breach date: 2022-01-01
Accounts affected: 6682453
Data exposed: Bios, Email addresses, Geographic locations, Names, Phone numbers, Profile photos, Usernames
In January 2022, a vulnerability in Twitter's platform allowed an attacker to build a database of the email addresses and phone numbers of millions of users of the social platform. In a disclosure notice later shared in August 2022, Twitter advised that the vulnerability was related to a bug introduced in June 2021 and that they are directly notifying impacted customers. The impacted data included either email address or phone number alongside other public information including the username, display name, bio, location and profile photo. The data included 6.7M unique email addresses across both active and suspended accounts, the latter appearing in a separate list of 1.4M addresses.
Twitter (200M) (twitter.com)
Breach date: 2021-01-01
Accounts affected: 211524284
Data exposed: Email addresses, Names, Social media profiles, Usernames
In early 2023, over 200M records scraped from Twitter appeared on a popular hacking forum. The data was obtained sometime in 2021 by abusing an API that enabled email addresses to be resolved to Twitter profiles. The subsequent results were then composed into a corpus of data containing email addresses alongside public Twitter profile information including names, usernames and follower counts.
Ualabee (ualabee.com)
Breach date: 2025-05-06
Accounts affected: 472296
Data exposed: Dates of birth, Email addresses, Names, Phone numbers, Profile photos
In May 2025, the South American mobility services platform Ualabee had hundreds of thousands of records scraped from an interface on their platform. The data included 472k unique email addresses along with names, profile photos, dates of birth and phone numbers.
Ubook (ubook.com)
Breach date: 2024-07-28
Accounts affected: 699908
Data exposed: Dates of birth, Email addresses, Genders, Names, Profile photos
In July 2024, 700k unique email addresses from the audiobook platform Ubook were posted to a popular hacking forum. Allegedly scraped from the service, the data appears to be sourced from the Ubook Exchange (UBX) and also includes names, genders, dates of birth and links to profile photos.
Uiggy (uiggy.com)
Breach date: 2016-06-01
Accounts affected: 2682650
Data exposed: Email addresses, Genders, Names, Social connections, Website activity
In June 2016, the Facebook application known as Uiggy was hacked and 4.3M accounts were exposed, 2.7M of which had email addresses against them. The leaked accounts also exposed names, genders and the Facebook ID of the owners.
Ulmon (ulmon.com)
Breach date: 2020-01-26
Accounts affected: 777769
Data exposed: Bios, Email addresses, Names, Passwords, Phone numbers, Social media profiles
In January 2020, the travel app creator Ulmon suffered a data breach. The service had almost 1.3M records with 777k unique email addresses, names, passwords stored as bcrypt hashes and in some cases, social media profile IDs, telephone numbers and bios. The data was subsequently posted to a popular hacking forum.
UN Internet Governance Forum (intgovforum.org)
Breach date: 2014-02-20
Accounts affected: 3200
Data exposed: Email addresses, Names, Passwords, Usernames
In February 2014, the Internet Governance Forum (formed by the United Nations for policy dialogue on issues of internet governance) was attacked by hacker collective known as Deletesec. Although tasked with "ensuring the security and stability of the Internet", the IGF’s website was still breached and resulted in the leak of 3,200 email addresses, names, usernames and cryptographically stored passwords.
Under Armour (underarmour.com)
Breach date: 2025-11-17
Accounts affected: 72742892
Data exposed: Dates of birth, Email addresses, Genders, Geographic locations, Names, Purchases
In November 2025, the Everest ransomware group claimed Under Armour as a victim and attempted to extort a ransom, alleging they had obtained access to 343GB of data. In January 2026, customer data from the incident was published publicly on a popular hacking forum, including 72M email addresses. Many records also contained additional personal information such as names, dates of birth, genders, geographic locations and purchase information.
Underworld Empire (underworldempireforums.com)
Breach date: 2017-04-25
Accounts affected: 428779
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In April 2017, the vBulletin forum for the Underworld Empire game suffered a data breach that exposed 429k accounts. The data was then posted to a hacking forum in mid-February 2018 where it was made available to download. The source data contained IP and email addresses, usernames and salted MD5 hashes.
Unico Campania (unicocampania.it)
Breach date: 2020-08-19
Accounts affected: 166031
Data exposed: Email addresses, Passwords
In August 2020, the Neapolitan public transport website Unico Campania was hacked and the data extensively circulated. The breach contained 166k user records with email addresses and plain text passwords.
Unigame (unigame.me)
Breach date: 2019-12-14
Accounts affected: 843696
Data exposed: Email addresses, Passwords
In December 2019, the now defunct gaming website Unigame (maker of Hunter Online) suffered a data breach that was later redistributed as part of a larger corpus of data. The data included 844k email addresses and salted MD5 password hashes.
Universarium (universarium.org)
Breach date: 2019-11-01
Accounts affected: 564962
Data exposed: Email addresses, Passwords
In approximately November 2019, the Russian "Remote preparatory faculty for IT specialties" Universarium suffered a data breach. The incident exposed 565k email addresses and passwords in plain text. Universarium did not respond to multiple attempts to make contact over a period of many weeks. The data was provided to HIBP by dehashed.com.
University of California (universityofcalifornia.edu)
Breach date: 2020-12-24
Accounts affected: 547422
Data exposed: Dates of birth, Education levels, Email addresses, Ethnicities, Genders, Job titles, Names, Phone numbers, Physical addresses, Social security numbers
In December 2020, the University of California suffered a data breach due to vulnerability in in a third-party provider, Accellion. The breach exposed extensive personal data on both students and staff including 547 thousand unique email addresses, names, dates of birth, genders, social security numbers, ethnicities and other academic related data attributes. Further analysis is available in Exploring the Impact of the UC Data Breach. The data was provided to HIBP courtesy of Cyril Gorlla.
University of Pennsylvania (upenn.edu)
Breach date: 2025-10-30
Accounts affected: 623750
Data exposed: Charitable donations, Dates of birth, Email addresses, Genders, Income levels, Job titles, Names, Physical addresses, Religions, Salutations, Spouses names
In October 2025, the University of Pennsylvania was the victim of a data breach followed by a ransom demand, largely affecting its donor database. After the incident, the attackers sent inflammatory emails to some victims. The data was later published online in February 2026 and included 624k unique email addresses alongside names and physical addresses. For some donor records, additional personal information was exposed, including gender and date of birth. A small subset of records also contained religion, spouse name, estimated income and donation history.
Unreal Engine (unrealengine.com)
Breach date: 2016-08-11
Accounts affected: 530147
Data exposed: Email addresses, Passwords, Usernames
In August 2016, the Unreal Engine Forum suffered a data breach, allegedly due to a SQL injection vulnerability in vBulletin. The attack resulted in the exposure of 530k accounts including usernames, email addresses and salted MD5 hashes of passwords.
Unverified Data Source (astoriacompany.com)
Breach date: 2021-01-26
Accounts affected: 11498146
Data exposed: Bank account numbers, Credit status information, Dates of birth, Email addresses, Employers, Health insurance information, Income levels, IP addresses, Names, Personal health data, Phone numbers, Physical addresses, Smoking habits, Social security numbers
In January 2021, over 11M unique email addresses were discovered by Night Lion Security alongside an extensive amount of personal information including names, physical and IP addresses, phone numbers and dates of birth. Some records also contained social security numbers, driver's license details, personal financial information and health-related data, depending on where the information was sourced from. Initially attributed to Astoria Company, they subsequently investigated the incident and confirmed the data did not originate from their services.
Upstox (upstox.com)
Breach date: 2021-04-08
Accounts affected: 111002
Data exposed: Bank account numbers, Dates of birth, Email addresses, Family members' names, Genders, Government issued IDs, Income levels, Marital statuses, Nationalities, Occupations, Passwords, Phone numbers, Physical addresses
In April 2021, Indian brokerage firm Upstox suffered a data breach. The incident exposed extensive personal information on over 100k customers including names, genders, dates of birth, physical addresses, banking information and passwords stored as bcrypt hashes. Extensive "know your customer" information was also exposed including scans of bank statements, cheques and identity documents complete with Aadhaar numbers.
Utah Gun Exchange (utahgunexchange.com)
Breach date: 2020-07-17
Accounts affected: 235233
Data exposed: Email addresses, Genders, IP addresses, Passwords, Usernames
In July 2020, the Utah Gun Exchange website suffered a data breach which included several other associated websites. In total, 235k unique email addresses were exposed before being traded online alongside names, usernames, genders, IP addresses and password hashes. The data was provided to HIBP by breachbase.pw.
Utair (utair.ru)
Breach date: 2019-03-21
Accounts affected: 401400
Data exposed: Dates of birth, Email addresses, Genders, Loyalty program details, Names, Passport numbers, Phone numbers, Physical addresses
In August 2020, news broke of a data breach of Russian airline Utair that dated back to the previous year. The breach contained over 400k unique email addresses along with extensive personal information including names, physical addresses, dates of birth, passport numbers and loyalty program details.
uTorrent (utorrent.com)
Breach date: 2016-01-14
Accounts affected: 395044
Data exposed: Email addresses, Passwords, Usernames
In early 2016, the forum for the uTorrent BitTorrent client suffered a data breach which came to light later in the year. The database from the IP.Board based forum contained 395k accounts including usernames, email addresses and MD5 password hashes without a salt.
uuu9 (uuu9.com)
Breach date: 2016-09-06
Accounts affected: 7485802
Data exposed: Email addresses, Passwords, Usernames
In September 2016, data was allegedly obtained from the Chinese website known as uuu9.com and contained 7.5M accounts. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains email addresses and user names. Read more about Chinese data breaches in Have I Been Pwned.
Vakinha (vakinha.com.br)
Breach date: 2020-06-22
Accounts affected: 4775203
Data exposed: Dates of birth, Email addresses, IP addresses, Names, Passwords, Phone numbers
In June 2020, the Brazilian fund raising service Vakinha suffered a data breach which impacted almost 4.8 million members. The exposed data included email addresses, names, phone numbers, geographic locations and passwords stored as bcrypt hashes, all of which was subsequently shared extensively throughout online hacking communities. The data was provided to HIBP by dehashed.com.
Vastaamo (vastaamo.fi)
Breach date: 2019-03-31
Accounts affected: 30433
Data exposed: Email addresses, Names, Personal health data, Social security numbers
In October 2020, the Finnish psychotherapy service Vastaamo was the subject of a ransomware attack targeting first the company itself, followed by their patients directly. The original security incident dates back to a period between late 2018 and early 2019 and exposed data including 30k unique email addresses, names, social security numbers and notes on individuals' psychotherapy sessions. This breach has been flagged as "sensitive" and is only searchable by owners of the email addresses and domains exposed in the incident.
vBulletin (vbulletin.com)
Breach date: 2015-11-03
Accounts affected: 518966
Data exposed: Dates of birth, Email addresses, Homepage URLs, Instant messenger identities, IP addresses, Passwords, Security questions and answers, Spoken languages, Website activity
In November 2015, the forum software maker vBulletin suffered a serious data breach. The attack lead to the release of both forum user and customer accounts totalling almost 519k records. The breach included email addresses, birth dates, security questions and answers for customers and salted hashes of passwords for both sources.
Vedantu (vedantu.com)
Breach date: 2019-07-08
Accounts affected: 686899
Data exposed: Browser user agent details, Email addresses, Genders, IP addresses, Names, Passwords, Phone numbers, Spoken languages, Time zones, Website activity
In mid-2019, the Indian interactive online tutoring platform Vedantu suffered a data breach which exposed the personal data of 687k users. The JSON formatted database dump exposed extensive personal information including email and IP address, names, phone numbers, genders and passwords stored as bcrypt hashes. When contacted about the incident, Vedantu advised that they were aware of the breach and were in the process of informing their customers.
Verifications.io (verifications.io)
Breach date: 2019-02-25
Accounts affected: 763117241
Data exposed: Dates of birth, Email addresses, Employers, Genders, Geographic locations, IP addresses, Job titles, Names, Phone numbers, Physical addresses
In February 2019, the email address validation service verifications.io suffered a data breach. Discovered by Bob Diachenko and Vinny Troia, the breach was due to the data being stored in a MongoDB instance left publicly facing without a password and resulted in 763 million unique email addresses being exposed. Many records within the data also included additional personal attributes such as names, phone numbers, IP addresses, dates of birth and genders. No passwords were included in the data. The Verifications.io website went offline during the disclosure process, although an archived copy remains viewable.
Verified (verified.cm)
Breach date: 2014-01-10
Accounts affected: 16919
Data exposed: Email addresses, Historical passwords, IP addresses, Passwords, Private messages, Usernames, Website activity
In January 2014, one of the largest communities of Eastern Europe cybercriminals known as "Verified" was hacked. The breach exposed nearly 17k users of the vBulletin forum including their personal messages and other potentially personally identifiable information.
Vermillion (v3rmillion.net)
Breach date: 2014-08-30
Accounts affected: 8106
Data exposed: Dates of birth, Email addresses, IP addresses, Passwords, Usernames
In August 2014, the Roblox hacking forum Vermillion suffered a data breach that exposed over 8k subscriber records. The breach of the MyBB forum exposed email and IP addresses, usernames, dates of birth and salted password hashes.
Vianet (vianet.com.np)
Breach date: 2020-04-08
Accounts affected: 94353
Data exposed: Email addresses, Names, Phone numbers, Physical addresses
In April 2020, the Nepalese internet service provider Vianet suffered a data breach. The attack on the ISP led to the exposure of 177k customer records including 94k unique email addresses. Also exposed were names, phone numbers and physical addresses.
Victory Phones (victoryphones.com)
Breach date: 2017-01-01
Accounts affected: 166046
Data exposed: Dates of birth, Email addresses, IP addresses, Names, Phone numbers, Physical addresses
In January 2017, the automated telephony services company Victory Phones left a Mongo DB database publicly facing without a password. Subsequently, 213GB of data was downloaded by an unauthorised party including names, addresses, phone numbers and over 166k unique email addresses.
Vietnam Airlines (vietnamairlines.com)
Breach date: 2025-06-20
Accounts affected: 7316915
Data exposed: Dates of birth, Email addresses, Loyalty program details, Names, Phone numbers
In October 2025, data stolen from the Salesforce instances of multiple companies by a hacking group calling itself "Scattered LAPSUS$ Hunters" was publicly released. Among the affected organisations was Vietnam Airlines, which had 7.3M unique customer email addresses exposed following a breach of its Salesforce environment in June of that year. The compromised data also included names, phone numbers, dates of birth, and loyalty program membership numbers.
ViewFines (viewfines.co.za)
Breach date: 2018-05-07
Accounts affected: 777649
Data exposed: Email addresses, Government issued IDs, Names, Passwords, Phone numbers
In May 2018, the South African website for viewing traffic fines online known as ViewFines suffered a data breach. Over 934k records containing 778k unique email addresses were exposed and included names, phone numbers, government issued IDs and passwords stored in plain text.