Tiago2024180/eyewebdataset huggingface dataset:
Bell (2014 breach) (bell.ca)
Breach date: 2014-02-01
Accounts affected: 20902
Data exposed: Credit cards, Genders, Passwords, Usernames
In February 2014, Bell Canada suffered a data breach via the hacker collective known as NullCrew. The breach included data from multiple locations within Bell and exposed email addresses, usernames, user preferences and a number of unencrypted passwords and credit card data from 40,000 records containing just over 20,000 unique email addresses and usernames.
Bell (2017 breach) (bell.ca)
Breach date: 2017-05-15
Accounts affected: 2231256
Data exposed: Email addresses, Geographic locations, IP addresses, Job titles, Names, Passwords, Phone numbers, Spoken languages, Survey results, Usernames
In May 2017, the Bell telecommunications company in Canada suffered a data breach resulting in the exposure of millions of customer records. The data was consequently leaked online with a message from the attacker stating that they were "releasing a significant portion of Bell.ca's data due to the fact that they have failed to cooperate with us" and included a threat to leak more. The impacted data included over 2 million unique email addresses and 153k survey results dating back to 2011 and 2012. There were also 162 Bell employee records with more comprehensive personal data including names, phone numbers and plain text "passcodes". Bell suffered another breach in 2014 which exposed 40k records.
Benchmark (benchmark.rs)
Breach date: 2019-11-01
Accounts affected: 93343
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In November 2019, the Serbian technology news website Benchmark suffered a breach of its forum that exposed 93k customer records. The breach exposed IP and email addresses, usernames and passwords stored as salted MD5 hashes. A forum administrator subsequently advised that the breach was due to the forum previously running on an outdated vBulletin instance.
Bestialitysextaboo (bestialitysextaboo.com)
Breach date: 2018-03-19
Accounts affected: 3204
Data exposed: Dates of birth, Email addresses, Genders, Geographic locations, IP addresses, Passwords, Private messages, Usernames
In March 2018, the animal bestiality website known as Bestialitysextaboo was hacked. A collection of various sites running on the same service were also compromised and details of the hack (including links to the data) were posted on a popular forum. In all, more than 3.2k unique email addresses were included alongside usernames, IP addresses, dates of birth, genders and bcrypt hashes of passwords.
Betterment (betterment.com)
Breach date: 2026-01-09
Accounts affected: 1435174
Data exposed: Dates of birth, Device information, Email addresses, Employers, Geographic locations, Job titles, Names, Phone numbers, Physical addresses
In January 2026, the automated investment platform Betterment confirmed it had suffered a data breach attributed to a social engineering attack. As part of the incident, Betterment customers received fraudulent crypto-related messages promising high returns if funds were sent to an attacker-controlled cryptocurrency wallet. The breach exposed 1.4M unique email addresses, along with names and geographic location data. A subset of records also included dates of birth, phone numbers, and physical addresses. In its disclosure notice, Betterment stated that the incident did not provide attackers with access to customer accounts and did not expose passwords or other login credentials.
Bhinneka (bhinneka.com)
Breach date: 2020-01-27
Accounts affected: 1274340
Data exposed: Dates of birth, Email addresses, Genders, Names, Passwords, Phone numbers, Physical addresses
In early 2020, the Indonesian consumer electronics website Bhinneka suffered a data breach that exposed almost 1.3M customer records. The data included email and physical addresses, names, genders, dates of birth, phone numbers and salted password hashes.
bigbasket (bigbasket.com)
Breach date: 2020-10-14
Accounts affected: 24500011
Data exposed: Dates of birth, Email addresses, IP addresses, Names, Passwords, Phone numbers, Physical addresses
In October 2020, the Indian grocery platform bigbasket suffered a data breach that exposed over 20 million customer records. The data was originally sold before being leaked publicly in April the following year and included email, IP and physical addresses, names, phones numbers, dates of birth passwords stored as Django(SHA-1) hashes.
BigMoneyJobs (bigmoneyjobs.com)
Breach date: 2014-04-03
Accounts affected: 36789
Data exposed: Career levels, Education levels, Email addresses, Names, Passwords, Phone numbers, Physical addresses, Salutations, User website URLs, Website activity
In April 2014, the job site bigmoneyjobs.com was hacked by an attacker known as "ProbablyOnion". The attack resulted in the exposure of over 36,000 user accounts including email addresses, usernames and passwords which were stored in plain text. The attack was allegedly mounted by exploiting a SQL injection vulnerability.
Bin Weevils (binweevils.com)
Breach date: 2014-09-01
Accounts affected: 1287073
Data exposed: Ages, Email addresses, Genders, IP addresses, Passwords, Usernames
In September 2014, the online game Bin Weevils suffered a data breach. Whilst originally stating that only usernames and passwords had been exposed, a subsequent story on DataBreaches.net indicated that a more extensive set of personal attributes were impacted (comments there also suggest the data may have come from a later breach). Data matching that pattern was later provided to Have I Been Pwned by @akshayindia6 and included almost 1.3m unique email addresses, genders, ages and plain text passwords.
Biohack.me (biohack.me)
Breach date: 2016-12-02
Accounts affected: 3402
Data exposed: Email addresses, Passwords, Private messages, Usernames
In December 2016, the forum for the biohacking website Biohack.me suffered a data breach that exposed 3.4k accounts. The data included usernames, email addresses and hashed passwords along with the private messages of forum members. The data was self-submitted to HIBP by the Biohack.me operators.
Bitcoin Security Forum Gmail Dump (forum.btcsec.com)
Breach date: 2014-01-09
Accounts affected: 4789599
Data exposed: Email addresses, Passwords
In September 2014, a large dump of nearly 5M usernames and passwords was posted to a Russian Bitcoin forum. Whilst commonly reported as 5M "Gmail passwords", the dump also contained 123k yandex.ru addresses. Whilst the origin of the breach remains unclear, the breached credentials were confirmed by multiple source as correct, albeit a number of years old.
Bitcoin Talk (bitcointalk.org)
Breach date: 2015-05-22
Accounts affected: 501407
Data exposed: Dates of birth, Email addresses, Genders, IP addresses, Passwords, Security questions and answers, Usernames, Website activity
In May 2015, the Bitcoin forum Bitcoin Talk was hacked and over 500k unique email addresses were exposed. The attack led to the exposure of a raft of personal data including usernames, email and IP addresses, genders, birth dates, security questions and MD5 hashes of their answers plus hashes of the passwords themselves.
Bitly (bitly.com)
Breach date: 2014-05-08
Accounts affected: 9313136
Data exposed: Email addresses, Passwords, Usernames
In May 2014, the link management company Bitly announced they'd suffered a data breach. The breach contained over 9.3 million unique email addresses, usernames and hashed passwords, most using SHA1 with a small number using bcrypt.
BitTorrent (bittorrent.com)
Breach date: 2016-01-01
Accounts affected: 34235
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In January 2016, the forum for the popular torrent software BitTorrent was hacked. The IP.Board based forum stored passwords as weak SHA1 salted hashes and the breached data also included usernames, email and IP addresses.
BitView (bitview.net)
Breach date: 2024-12-14
Accounts affected: 63127
Data exposed: Bios, Comments, Dates of birth, Email addresses, Genders, Geographic locations, IP addresses, Passwords, Private messages, Usernames
In December 2024, the video sharing Community BitView suffered a data breach that exposed 63k customer records. Attributed to a backup taken by a previous administrator earlier in the year, the breach exposed email and IP addresses, bcrypt password hashes, usernames, bios, private messages, video comments and for some records, gender, date of birth and country of location.
Black Hat World (blackhatworld.com)
Breach date: 2014-06-23
Accounts affected: 777387
Data exposed: Dates of birth, Email addresses, Instant messenger identities, IP addresses, Passwords, Usernames, Website activity
In June 2014, the search engine optimisation forum Black Hat World had three quarters of a million accounts breached from their system. The breach included various personally identifiable attributes which were publicly released in a MySQL database script.
BlackBerry Fans (blackberryfans.org)
Breach date: 2022-05-06
Accounts affected: 174168
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In May 2022, the Chinese BlackBerry enthusiasts website BlackBerry Fans suffered a data breach that exposed 174k member records. The impacted data included usernames, email and IP addresses and passwords stored as salted MD5 hashes.
BlackSpigotMC (blackspigot.com)
Breach date: 2019-07-14
Accounts affected: 140029
Data exposed: Device information, Email addresses, Genders, Geographic locations, IP addresses, Passwords, Usernames
In July 2019, the hacking website BlackSpigotMC suffered a data breach. The XenForo forum based site was allegedly compromised by a rival hacking website and resulted in 8.5GB of data being leaked including the database and website itself. The exposed data included 140k unique email addresses, usernames, IP addresses, genders, geographic locations and passwords stored as bcrypt hashes.
BlankMediaGames (blankmediagames.com)
Breach date: 2018-12-28
Accounts affected: 7633234
Data exposed: Browser user agent details, Email addresses, IP addresses, Passwords, Purchases, Usernames, Website activity
In December 2018, the Town of Salem website produced by BlankMediaGames suffered a data breach. Reported to HIBP by DeHashed, the data contained 7.6M unique user email addresses alongside usernames, IP addresses, purchase histories and passwords stored as phpass hashes. DeHashed made multiple attempts to contact BlankMediaGames over various channels and many days but had yet to receive a response at the time of publishing.
Bleach Anime Forum (bleachanime.org)
Breach date: 2015-01-01
Accounts affected: 143711
Data exposed: Email addresses, Passwords, Usernames
In 2015, the now defunct independent forum for the Bleach Anime series suffered a data breach that exposed 144k user records. The impacted data included usernames, email addresses and salted MD5 password hashes.
Blooms Today (bloomstoday.com)
Breach date: 2023-11-11
Accounts affected: 3184010
Data exposed: Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses
In April 2024, 15M records from the online florist Blooms Today were listed for sale on a popular hacking forum. The most recent data in the breach corpus was from November 2023 and appeared alongside 3.2M unique email addresses, names, phone numbers physical addresses and partial credit card data (card type, 4 digits of the number and expiry date). The breach did not expose sufficient card data to make purchases. Blooms Today did not respond when contacted about the incident.
boAt (boat-lifestyle.com)
Breach date: 2024-03-25
Accounts affected: 7528985
Data exposed: Email addresses, Names, Phone numbers, Physical addresses
In March 2024, the Indian audio and wearables brand boAt suffered a data breach that exposed 7.5M customer records. The data included physical and email address, names and phone numbers, all of which were subsequently published to a popular clear web hacking forum.
Bolt (bolt.cd)
Breach date: 2017-03-01
Accounts affected: 995274
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In approximately March 2017, the file sharing website Bolt suffered a data breach resulting in the exposure of 995k unique user records. The data was sourced from their vBulletin forum and contained email and IP addresses, usernames and salted MD5 password hashes. The site was previously reported as compromised on the Vigilante.pw breached database directory.
Bombuj.eu (bombuj.eu)
Breach date: 2018-12-07
Accounts affected: 575437
Data exposed: Email addresses, Passwords
In December 2018, the Slovak website for watching movies online for free Bombuj.eu suffered a data breach. The incident exposed over 575k unique email addresses and passwords stored as unsalted MD5 hashes. No response was received from Bombuj.eu when contacted about the incident.
Bonobos (bonobos.com)
Breach date: 2020-08-14
Accounts affected: 2811929
Data exposed: Email addresses, Historical passwords, IP addresses, Names, Partial credit card data, Passwords, Phone numbers, Physical addresses, Purchases
In August 2020, the clothing store Bonobos suffered a data breach that exposed almost 70GB of data containing 2.8 million unique email addresses. The breach also exposed names, physical and IP addresses, phone numbers, order histories and passwords stored as salted SHA-512 hashes, including historical passwords. The breach also exposed partial credit card data including card type, the name on the card, expiry date and the last 4 digits of the card. The data was provided to HIBP by dehashed.com.
Bookchor (bookchor.com)
Breach date: 2021-01-28
Accounts affected: 498297
Data exposed: Dates of birth, Email addresses, Genders, IP addresses, Names, Passwords, Phone numbers, Social media profiles
In January 2021, the Indian book trading website Bookchor suffered a data breach that exposed half a million customer records. The exposed data included email and IP addresses, names, genders, dates of birth, phone numbers and passwords stored as unsalted MD5 hashes. The data was subsequently traded on a popular hacking forum.
BookCrossing (bookcrossing.com)
Breach date: 2012-11-05
Accounts affected: 1582323
Data exposed: Dates of birth, Email addresses, Geographic locations, IP addresses, Names, Passwords, Usernames
In August 2022, the book social networking site BookCrossing disclosed a data breach that dated back to a database backup from November 2012. The incident exposed almost 1.6M records including names, usernames, email and IP addresses, dates of birth and plain text passwords.
Bookmate (bookmate.com)
Breach date: 2018-07-08
Accounts affected: 3830916
Data exposed: Dates of birth, Email addresses, Genders, Geographic locations, Names, Passwords, Usernames
In mid-2018, the social ebook subscription service Bookmate was among a raft of sites that were breached and their data then sold in early-2019. The data included almost 4 million unique email addresses alongside names, genders, dates of birth and passwords stored as salted SHA-512 hashes.
Bot of Legends (botoflegends.com)
Breach date: 2014-11-13
Accounts affected: 238373
Data exposed: Email addresses, IP addresses, Passwords, Usernames, Website activity
In November 2014, the forum for Bot of Legends suffered a data breach. The IP.Board forum contained 238k accounts including usernames, email and IP addresses and passwords stored as salted MD5 hashes.
Boulanger (boulanger.com)
Breach date: 2024-09-06
Accounts affected: 2077078
Data exposed: Email addresses, Geographic locations, Names, Phone numbers, Physical addresses
In September 2024, French electronics retailer Boulanger suffered a data breach that exposed over 27M rows of data. The data included 2M unique email addresses along with names, physical addresses, phone numbers and latitude and longitude. The data was later publicly published to a popular hacking forum.
Bourse des Vols (bourse-des-vols.com)
Breach date: 2021-01-12
Accounts affected: 1460130
Data exposed: Dates of birth, Email addresses, Flights taken, IP addresses, Names, Phone numbers, Physical addresses, Purchases
In January 2021, the French travel company Bourse des Vols suffered a data breach that exposed 1.46M unique email addresses across more than 1.2k .sql files and over 9GB of data. The impacted data exposed personal information and travel histories including names, phone numbers, IP and physical addresses, dates of birth along with flights taken and purchases.
Bouygues Telecom (bouyguestelecom.fr)
Breach date: 2025-08-04
Accounts affected: 5685771
Data exposed: Bank account numbers, Dates of birth, Email addresses, Names, Phone numbers, Physical addresses
In August 2025, the French telecommunications company Bouygues Telecom detected a cyber attack against their services. The incident resulted in a data breach that exposed almost 6.4M customer records, including 5.7M unique email addresses. The breach also exposed names, physical addresses, phone numbers, dates of birth and IBANs (International Bank Account Numbers). Bouygues Telecom advised that all affected customers had been notified about the incident.
Boxee (forums.boxee.com)
Breach date: 2014-03-29
Accounts affected: 158093
Data exposed: Dates of birth, Email addresses, Geographic locations, Historical passwords, Instant messenger identities, IP addresses, Passwords, Private messages, User website URLs, Usernames
In March 2014, the home theatre PC software maker Boxee had their forums compromised in an attack. The attackers obtained the entire vBulletin MySQL database and promptly posted it for download on the Boxee forum itself. The data included 160k users, password histories, private messages and a variety of other data exposed across nearly 200 publicly exposed tables.
Brand New Tube (brandnewtube.com)
Breach date: 2022-08-14
Accounts affected: 349627
Data exposed: Email addresses, Genders, IP addresses, Passwords, Private messages, Usernames
In August 2022, the streaming website Brand New Tube suffered a data breach that exposed the personal information of almost 350k subscribers. The impacted data included email and IP addresses, usernames, genders, passwords stored as unsalted SHA-1 hashes and private messages.
Brazzers (brazzers.com)
Breach date: 2013-04-01
Accounts affected: 790724
Data exposed: Email addresses, Passwords, Usernames
In April 2013, the adult website known as Brazzers was hacked and 790k accounts were exposed publicly. Each record included a username, email address and password stored in plain text. The breach was brought to light by the Vigilante.pw data breach reporting site in September 2016.
BreachForums (breached.vc)
Breach date: 2022-11-29
Accounts affected: 212156
Data exposed: Email addresses, IP addresses, Passwords, Private messages, Usernames
In November 2022, the well-known hacking forum "BreachForums" was itself, breached. Later the following year, the operator of the website was arrested and the site seized by law enforcement agencies. The breach exposed 212k records including usernames, IP and email addresses, private messages between site members and passwords stored as argon2 hashes./a>.
BreachForums (2025) (breachforums.hn)
Breach date: 2025-08-11
Accounts affected: 672247
Data exposed: Email addresses, Forum posts, Passwords, Private messages, Usernames
In October 2025, a reincarnation of the hacking forum BreachForums, which had previously been shut down multiple times, was taken offline by a coalition of law enforcement agencies. In the months leading up to the takedown, the site itself suffered a data breach that exposed a total of 672k unique email addresses across all tables, including within forum posts and private messages. The users table alone contained 324k unique email addresses, usernames, and Argon2 password hashes.
BreachForums Clone (breachforums.vc)
Breach date: 2023-06-17
Accounts affected: 4204
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In June 2023, a clone of the previously shuttered popular hacking forum "BreachForums" suffered a data breach that exposed over 4k records. The breach was due to an exposed backup of the MyBB database which included email and IP addresses, usernames and Argon2 password hashes.
BreachForums Version 5 (breachforums.bf)
Breach date: 2026-03-26
Accounts affected: 339778
Data exposed: Email addresses, Passwords, Usernames
In March 2026, a breach of one of the many iterations of the BreachForums hacking forum known as "Version 5" was publicly disclosed. The incident exposed 340k unique email addresses along with usernames and argon2 password hashes.
BTC-Alpha (btc-alpha.com)
Breach date: 2021-11-02
Accounts affected: 362426
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In November 2021, the crypto exchange platform BTC-Alpha suffered a ransomware attack data breach after which customer data was publicly dumped. The impacted data included 362k email and IP addresses, usernames and passwords stored as PBKDF2 hashes.
BTC-E (btc-e.com)
Breach date: 2014-10-01
Accounts affected: 568340
Data exposed: Account balances, Email addresses, IP addresses, Passwords, Usernames, Website activity
In October 2014, the Bitcoin exchange BTC-E was hacked and 568k accounts were exposed. The data included email and IP addresses, wallet balances and hashed passwords.
BtoBet (btobet.com)
Breach date: 2019-12-26
Accounts affected: 444241
Data exposed: Dates of birth, Email addresses, Financial transactions, Geographic locations, IP addresses, Names, Usernames
In December 2019, a large collection of data from Nigerian gambling company Surebet247 was sent to HIBP. Alongside the Surebet247, database backups from gambling sites BetAlfa, BetWay, BongoBongo and TopBet was also included. Further investigation implicated betting platform provider BtoBet as being the common source of the data. Impacted data included user records and extensive information on gambling histories.
BudTrader (budtrader.com)
Breach date: 2024-06-27
Accounts affected: 2721185
Data exposed: Email addresses, Passwords, Usernames
In July 2024, a data breach of the now defunct cannabis social platform BudTrader was posted for sale on a hacking forum. Dating back to the previous month, the breach of the website exposed 2.7M email addresses, usernames and WordPress password hashes.
Bukalapak (bukalapak.com)
Breach date: 2017-10-23
Accounts affected: 13369666
Data exposed: Email addresses, IP addresses, Names, Passwords, Usernames
In March 2019, the Indonesian e-commerce website Bukalapak discovered a data breach of the organisation's backups dating back to October 2017. The incident exposed approximately 13 million unique email addresses alongside IP addresses, names and passwords stored as bcrypt and salted SHA-512 hashes.
Bulgarian National Revenue Agency (nap.bg)
Breach date: 2019-07-15
Accounts affected: 471167
Data exposed: Email addresses, Names, Phone numbers, Physical addresses, Taxation records
In July 2019, a massive data breach of the Bulgarian National Revenue Agency began circulating with data on 5 million people. Allegedly obtained in June, the data was broadly shared online and included taxation information alongside names, phone numbers, physical addresses and 471 thousand unique email addresses. The breach is said to have affected "nearly all adults in Bulgaria".
Business Acumen Magazine (businessacumen.biz)
Breach date: 2014-04-25
Accounts affected: 26596
Data exposed: Email addresses, Names, Passwords, Usernames, Website activity
In April 2014, the Australian "Business Acumen Magazine" website was hacked by an attacker known as 1337MiR. The breach resulted in over 26,000 accounts being exposed including usernames, email addresses and password stored with a weak cryptographic hashing algorithm (MD5 with no salt).
CafeMom (cafemom.com)
Breach date: 2014-04-10
Accounts affected: 2628148
Data exposed: Email addresses, Passwords
In 2014, the social network for mothers CafeMom suffered a data breach. The data surfaced alongside a number of other historical breaches including Kickstarter, Bitly and Disqus and contained 2.6 million email addresses and plain text passwords.