Tiago2024180/eyewebdataset huggingface dataset:
Lead Hunter ()
Breach date: 2020-03-04
Accounts affected: 68693853
Data exposed: Email addresses, Genders, IP addresses, Names, Phone numbers, Physical addresses
In March 2020, a massive trove of personal information referred to as "Lead Hunter" was provided to HIBP after being found left exposed on a publicly facing Elasticsearch server. The data contained 69 million unique email addresses across 110 million rows of data accompanied by additional personal information including names, phone numbers, genders and physical addresses. At the time of publishing, the breach could not be attributed to those responsible for obtaining and exposing it. The data was provided to HIBP by dehashed.com.
League of Legends (leagueoflegends.com)
Breach date: 2012-06-11
Accounts affected: 339487
Data exposed: Email addresses, Passwords, Usernames
In June 2012, the multiplayer online game League of Legends suffered a data breach. At the time, the service had more than 32 million registered accounts and the breach affected various personal data attributes including "encrypted" passwords. In 2018, a 339k record subset of the data emerged with email addresses, usernames and plain text passwords, likely cracked from the original cryptographically protected ones.
Leaked Reality (leakedreality.com)
Breach date: 2022-01-31
Accounts affected: 114907
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In January 2022, the now defunct uncensored video website Leaked Reality suffered a data breach that exposed 115k unique email addresses. The data also included usernames, IP addresses and passwords stored as either MD5 or phpass hashes.
Ledger (ledger.com)
Breach date: 2020-06-25
Accounts affected: 1075241
Data exposed: Email addresses, Names, Phone numbers, Physical addresses
In June 2020, the hardware crypto wallet manufacturer Ledger suffered a data breach that exposed over 1 million email addresses. The data was initially sold before being dumped publicly in December 2020 and included names, physical addresses and phone numbers. The data was provided to HIBP by Alon Gal, CTO of cybercrime intelligence firm Hudson Rock.
Leet (leet.cc)
Breach date: 2016-09-10
Accounts affected: 5081689
Data exposed: Email addresses, IP addresses, Passwords, Usernames, Website activity
In August 2016, the service for creating and running Pocket Minecraft edition servers known as Leet was reported as having suffered a data breach that impacted 6 million subscribers. The incident reported by Softpedia had allegedly taken place earlier in the year, although the data set sent to HIBP was dated as recently as early September but contained only 2 million subscribers. The data included usernames, email and IP addresses and SHA512 hashes. A further 3 million accounts were obtained and added to HIBP several days after the initial data was loaded bringing the total to over 5 million.
Legendas.TV (legendas.tv)
Breach date: 2017-10-01
Accounts affected: 3869181
Data exposed: Email addresses, IP addresses, Names, Passwords, Usernames
In October 2017, the now defunct Brazilian service for retrieving subtitles in Portuguese Legendas.TV suffered a data breach that exposed nearly 4M customer records. The impacted data included names, usernames, email and IP addresses and unsalted SHA-1 hashes.
Lexipol (lexipol.com)
Breach date: 2025-02-11
Accounts affected: 672546
Data exposed: Email addresses, Names, Passwords, Phone numbers, Usernames
In February 2025, the public safety policy management systems company Lexipol suffered a data breach. Attributed to the self-proclaimed "Puppygirl Hacker Polycule", the breach exposed an extensive number of documents and user records which were subsequently published publicly. The breach included over 670k unique email addresses in the user records, along with names, phone numbers, system-generated usernames and passwords stored as either MD5 or SHA-256 hashes.
Life360 (life360.com)
Breach date: 2024-03-01
Accounts affected: 442519
Data exposed: Email addresses, Names, Phone numbers
In July 2024, data scraped from a misconfigured Life360 API was posted online after being obtained several months earlier. The records included 443k unique email addresses and in most cases, corresponding names and phone numbers (some records were null or obfuscated). Life360 promptly notified impacted users after the incident was discovered.
Lifebear (lifebear.com)
Breach date: 2019-02-28
Accounts affected: 3670561
Data exposed: Email addresses, Passwords, Usernames
In early 2019, the Japanese schedule app Lifebear appeared for sale on a dark web marketplace amongst a raft of other hacked websites. The breach exposed almost 3.7M unique email addresses, usernames and passwords stored as salted MD5 hashes.
Lifeboat (lbsg.net)
Breach date: 2016-01-01
Accounts affected: 7089395
Data exposed: Email addresses, Passwords, Usernames
In January 2016, the Minecraft community known as Lifeboat was hacked and more than 7 million accounts leaked. Lifeboat knew of the incident for three months before the breach was made public but elected not to advise customers. The leaked data included usernames, email addresses and passwords stored as straight MD5 hashes.
Light's Hope (lightshope.org)
Breach date: 2018-06-25
Accounts affected: 30484
Data exposed: Dates of birth, Email addresses, Geographic locations, IP addresses, Passwords, Private messages, Usernames
In June 2018, the World of Warcraft service Light's Hope suffered a data breach which they subsequently self-submitted to HIBP. Over 30K unique users were impacted and their exposed data included email addresses, dates of birth, private messages and passwords stored as bcrypt hashes.
Liker (liker.com)
Breach date: 2021-03-08
Accounts affected: 465141
Data exposed: Auth tokens, Dates of birth, Education levels, Email addresses, Geographic locations, IP addresses, Names, Passwords, Phone numbers, Private messages, Security questions and answers, Social media profiles, Usernames
In March 2021, the self-proclaimed "kinder, smarter social network" Liker suffered a data breach, allegedly in retaliation for the Gab data breach and scraping of data from Parler. The site remained offline after the breach which exposed 465k email addresses in addition to names, dates of birth, education levels, private messages, security questions and answers in plain text, passwords stored as bcrypt hashes and other personal data attributes. Liker did not respond when contacted about the breach.
LimeVPN (limevpn.com)
Breach date: 2020-10-08
Accounts affected: 23348
Data exposed: Email addresses, IP addresses, Names, Passwords, Phone numbers, Physical addresses, Purchases
In October 2020, the VPN provider LimeVPN suffered a data breach that exposed the personal information of tens of thousands of customers. The data included email, IP and physical addresses, names, phone numbers, purchase histories and passwords stored as salted MD5 hashes.
LinkedIn (linkedin.com)
Breach date: 2012-05-05
Accounts affected: 164611595
Data exposed: Email addresses, Passwords
In May 2016, LinkedIn had 164 million email addresses and passwords exposed. Originally hacked in 2012, the data remained out of sight until being offered for sale on a dark market site 4 years later. The passwords in the breach were stored as SHA1 hashes without salt, the vast majority of which were quickly cracked in the days following the release of the data.
LinkedIn Scraped and Faked Data (2023) (linkedin.com)
Breach date: 2023-11-04
Accounts affected: 19788753
Data exposed: Email addresses, Genders, Geographic locations, Job titles, Names, Professional skills, Social media profiles
In November 2023, a post to a popular hacking forum alleged that millions of LinkedIn records had been scraped and leaked. On investigation, the data turned out to be a combination of legitimate data scraped from LinkedIn and email addresses constructed from impacted individuals' names.
LinkedIn Scraped Data (2021) (linkedin.com)
Breach date: 2021-04-08
Accounts affected: 125698496
Data exposed: Education levels, Email addresses, Genders, Geographic locations, Job titles, Names, Social media profiles
During the first half of 2021, LinkedIn was targeted by attackers who scraped data from hundreds of millions of public profiles and later sold them online. Whilst the scraping did not constitute a data breach nor did it access any personal data not intended to be publicly accessible, the data was still monetised and later broadly circulated in hacking circles. The scraped data contains approximately 400M records with 125M unique email addresses, as well as names, geographic locations, genders and job titles. LinkedIn specifically addresses the incident in their post on An update on report of scraped data.
Linux Forums (linuxforums.org)
Breach date: 2018-05-01
Accounts affected: 275785
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In May 2018, the Linux Forums website suffered a data breach which resulted in the disclosure of 276k unique email addresses. Running on an old version of vBulletin, the breach also disclosed usernames, IP addresses and salted MD5 password hashes. Linux Forums did not respond to multiple attempts to contact them about the breach.
Linux Mint (linuxmint.com)
Breach date: 2016-02-21
Accounts affected: 144989
Data exposed: Avatars, Dates of birth, Email addresses, Geographic locations, IP addresses, Passwords, Time zones, Website activity
In February 2016, the website for the Linux distro known as Linux Mint was hacked and the ISO infected with a backdoor. The site also ran a phpBB forum which was subsequently put up for sale complete with almost 145k email addresses, passwords and other personal subscriber information.
Little Monsters (littlemonsters.com)
Breach date: 2017-01-01
Accounts affected: 995698
Data exposed: Dates of birth, Email addresses, Passwords, Usernames
In approximately January 2017, the Lady Gaga fan site known as "Little Monsters" suffered a data breach that impacted 1 million accounts. The data contained usernames, email addresses, dates of birth and bcrypt hashes of passwords.
LiveAuctioneers (liveauctioneers.com)
Breach date: 2020-06-19
Accounts affected: 3385862
Data exposed: Email addresses, IP addresses, Names, Passwords, Phone numbers, Physical addresses, Usernames
In June 2020, the online antiques marketplace LiveAuctioneers suffered a data breach which was subsequently sold online then extensively redistributed in the hacking community. The data contained 3.4 million records including names, email and IP addresses, physical addresses, phones numbers and passwords stored as unsalted MD5 hashes. The data was provided to HIBP by breachbase.pw.
LiveJournal (livejournal.com)
Breach date: 2017-01-01
Accounts affected: 26372781
Data exposed: Email addresses, Passwords, Usernames
In mid-2019, news broke of an alleged LiveJournal data breach. This followed multiple reports of credential abuse against Dreamwidth beginning in 2018, a fork of LiveJournal with a significant crossover in user base. The breach allegedly dates back to 2017 and contains 26M unique usernames and email addresses (both of which have been confirmed to exist on LiveJournal) alongside plain text passwords. An archive of the data was subsequently shared on a popular hacking forum in May 2020 and redistributed broadly.
Livpure (livpure.com)
Breach date: 2020-08-29
Accounts affected: 269552
Data exposed: Email addresses, Names, Phone numbers, Physical addresses, Purchases, Salutations
In August 2020, the Indian retailer Livpure suffered a data breach which exposed over 1 million customer purchases with 270 thousand unique email addresses. The data also included names, phone numbers, physical addresses and details of purchased items.
Lizard Squad (lizardstresser.su)
Breach date: 2015-01-16
Accounts affected: 13451
Data exposed: Email addresses, Passwords, Usernames
In January 2015, the hacker collective known as "Lizard Squad" created a DDoS service by the name of "Lizard Stresser" which could be procured to mount attacks against online targets. Shortly thereafter, the service suffered a data breach which resulted in the public disclosure of over 13k user accounts including passwords stored in plain text.
Locally (locally.com)
Breach date: 2022-10-01
Accounts affected: 362619
Data exposed: Email addresses, Partial credit card data, Passwords, Phone numbers, Physical addresses, Purchases
In October 2022, "The Industry's Leading Online-to-Offline Shopping Solution" Locally suffered a data breach. Whilst Locally acknowledged the breach privately, it's unknown whether impacted customers were subsequently notified of the incident which exposed over 362k names, phone numbers, email and physical addresses, purchases, credit card type and last four digits and bcrypt password hashes.
Lolzteam (lolzteam.net)
Breach date: 2018-05-13
Accounts affected: 398011
Data exposed: Email addresses, Usernames
In May 2018, the Russian hacking forum Lolzteam suffered a data breach that exposed 400k members. The impacted data included usernames and email addresses which were later redistributed via another hacking forum.
Lookbook (lookbook.nu)
Breach date: 2012-08-24
Accounts affected: 1074948
Data exposed: Dates of birth, Email addresses, IP addresses, Names, Passwords, Usernames, Website activity
In August 2012, the fashion site Lookbook suffered a data breach. The data later appeared listed for sale in June 2016 and included 1.1 million usernames, email and IP addresses, birth dates and plain text passwords.
Lookiero (lookiero.com)
Breach date: 2024-03-27
Accounts affected: 4981760
Data exposed: Email addresses, Names, Phone numbers, Physical addresses
In August 2024, a data breach from the online styling service Lookiero was posted to a popular hacking forum. Dating back to March 2024, the data included 5M unique email addresses, with many of the records also including name, phone number and physical address. When contacted about the incident, Lookiero advised that they would "look into it and get back to you if necessary".
Lord of the Rings Online (lotro.com)
Breach date: 2013-08-01
Accounts affected: 1141278
Data exposed: Dates of birth, Email addresses, IP addresses, Passwords, Usernames, Website activity
In August 2013, the interactive video game Lord of the Rings Online suffered a data breach that exposed over 1.1M players' accounts. The data was being actively traded on underground forums and included email addresses, birth dates and password hashes.
Lounge Board (loungeboard.net)
Breach date: 2013-08-01
Accounts affected: 45018
Data exposed: Email addresses, IP addresses, Names, Passwords, Private messages, Usernames, Website activity
At some point in 2013, 45k accounts were breached from the Lounge Board "General Discussion Forum" and then dumped publicly. Lounge Board was a MyBB forum launched in 2012 and discontinued in mid 2013 (the last activity in the logs was from August 2013).
Lovora ()
Breach date: 2026-02-25
Accounts affected: 495556
Data exposed: Display names, Email addresses, Profile photos
In February 2026, the couples and relationship app Lovora allegedly suffered a data breach that exposed 496k unique email addresses. The data also included users’ display names and profile photos, along with other personal information collected through use of the app. The app’s maker, Plantake, did not respond to multiple attempts to contact them about the incident.
LuLu (luluhypermarket.com)
Breach date: 2024-07-06
Accounts affected: 2796835
Data exposed: Email addresses, Names, Passwords, Phone numbers, Physical addresses, Purchases
In July 2024, the Emirati-based LuLu retail store suffered a data breach. The impacted data included 190k email addresses and associated phone numbers which were subsequently shared on a popular hacking forum. The following month, the threat of leaking the full database was carried out and a backup from October 2022 with a further 2.6M unique email addresses appeared. This data also included names, physical addresses, orders and PBKDF2 password hashes.
Lumin PDF (luminpdf.com)
Breach date: 2019-04-01
Accounts affected: 15453048
Data exposed: Auth tokens, Email addresses, Genders, Names, Passwords, Spoken languages, Usernames
In April 2019, the PDF management service Lumin PDF suffered a data breach. The breach wasn't publicly disclosed until September when 15.5M records of user data appeared for download on a popular hacking forum. The data had been left publicly exposed in a MongoDB instance after which Lumin PDF was allegedly been "contacted multiple times, but ignored all the queries". The exposed data included names, email addresses, genders, spoken language and either a bcrypt password hash or Google auth token.
Luxottica (luxottica.com)
Breach date: 2021-03-16
Accounts affected: 77093812
Data exposed: Dates of birth, Email addresses, Genders, Names, Phone numbers, Physical addresses
In March 2021, the world's largest eyewear company Luxoticca suffered a data breach via one of their partners that exposed the personal information of more than 70M people. The data was subsequently sold via a popular hacking forum in late 2022 and included email and physical addresses, names, genders, dates of birth and phone numbers. In a statement from Luxottica, they advised they were aware of the incident and are currently "considering other notification obligations".
Lyrics Mania (lyricsmania.com)
Breach date: 2017-12-21
Accounts affected: 109202
Data exposed: Email addresses, Passwords, Usernames
In December 2017, the song lyrics website known as Lyrics Mania suffered a data breach. The data in the breach included 109k usernames, email addresses and plain text passwords. Numerous attempts were made to contact Lyrics Mania about the incident, however no responses were received.
Mac Forums (mac-forums.com)
Breach date: 2016-07-03
Accounts affected: 326714
Data exposed: Dates of birth, Email addresses, IP addresses, Passwords, Usernames
In July 2016, the self-proclaimed "Ultimate Source For Your Mac" website Mac Forums suffered a data breach. The vBulletin-based system exposed over 326k usernames, email and IP addresses, dates of birth and passwords stored as salted MD5 hashes. The data was later discovered being traded on a popular hacking forum. Mac Forums did not respond when contacted about the incident via their contact us form.
MacGeneration (macg.co)
Breach date: 2022-01-29
Accounts affected: 101004
Data exposed: Email addresses, Passwords, Usernames
In January 2022, the French Apple news website MacGeneration suffered a data breach. The incident exposed over 100k usernames, email addresses and passwords stored as salted SHA-512 hashes. After discovering the incident, MacGeneration self-submitted data to HIBP.
Mac-Torrents (mac-torrents.com)
Breach date: 2015-10-31
Accounts affected: 93992
Data exposed: Email addresses, Passwords, Usernames
In October 2015, the torrent site Mac-Torrents was hacked and almost 94k usernames, email addresses and passwords were leaked. The passwords were hashed with MD5 and no salt.
MagicDuel (magicduel.com)
Breach date: 2023-08-02
Accounts affected: 138443
Data exposed: Email addresses, IP addresses, Nicknames, Passwords
In August 2023, the MagicDuel Adventure website suffered a data breach that exposed 138k user records. The data included player names, email and IP addresses and bcrypt password hashes.
mail.ru Dump (mail.ru)
Breach date: 2014-09-10
Accounts affected: 16630988
Data exposed: Email addresses, Passwords
In September 2014, several large dumps of user accounts appeared on the Russian Bitcoin Security Forum including one with nearly 5M email addresses and passwords, predominantly on the mail.ru domain. Whilst unlikely to be the result of a direct attack against mail.ru, the credentials were confirmed by many as legitimate for other services they had subscribed to. Further data allegedly valid for mail.ru and containing email addresses and plain text passwords was added in January 2018 bringing to total to more than 16M records. The incident was also then flagged as "unverified", a concept that was introduced after the initial data load in 2014.
MajorGeeks (majorgeeks.com)
Breach date: 2015-11-15
Accounts affected: 269548
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In November 2015, almost 270k accounts from the MajorGeeks support forum were breached. The accounts were being actively sold and traded online and included email addresses, salted password hashes and IP addresses.
MalindoAir (malindoair.com)
Breach date: 2019-03-01
Accounts affected: 4328232
Data exposed: Dates of birth, Email addresses, Genders, Loyalty program details, Names, Nationalities, Passport numbers, Phone numbers, Physical addresses, Salutations
In early 2019, the Malaysian airline Malindo Air suffered a data breach that exposed tens of millions of customer records. Containing 4.3M unique email addresses, the breach also exposed extensive personal information including names, dates of birth, genders, physical addresses, phone numbers and passport details. The data was later extensively shared on popular hacking forums.
MALL.cz (mall.cz)
Breach date: 2017-07-27
Accounts affected: 735405
Data exposed: Email addresses, Names, Passwords, Phone numbers
In July 2017, the Czech Republic e-commerce site MALL.cz suffered a data breach after which 735k unique accounts including email addresses, names, phone numbers and passwords were later posted online. Whilst passwords were stored as hashes, a number of different algorithms of varying strength were used over time. All passwords included in the publicly distributed data were in plain text and were likely just those that had been successfully cracked (members with strong passwords don't appear to be included). According to MALL.cz, the breach only impacted accounts created before 2015.
Malwarebytes (malwarebytes.org)
Breach date: 2014-11-15
Accounts affected: 111623
Data exposed: Dates of birth, Email addresses, IP addresses, Passwords, Usernames, Website activity
In November 2014, the Malwarebytes forum was hacked and 111k member records were exposed. The IP.Board forum included email and IP addresses, birth dates and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.
Manga Traders (mangatraders.com)
Breach date: 2014-06-09
Accounts affected: 855249
Data exposed: Email addresses, Passwords
In June 2014, the Manga trading website Mangatraders.com had the usernames and passwords of over 900k users leaked on the internet (approximately 855k of the emails were unique). The passwords were weakly hashed with a single iteration of MD5 leaving them vulnerable to being easily cracked.
MangaDex (mangadex.org)
Breach date: 2021-03-22
Accounts affected: 2987329
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In March 2021, the manga fan site MangaDex suffered a data breach that resulted in the exposure of almost 3 million subscribers. The data included email and IP addresses, usernames and passwords stored as bcrypt hashes. The data was subsequently circulated within hacking groups.
MangaFox.me (mangafox.me)
Breach date: 2016-06-01
Accounts affected: 1311610
Data exposed: Dates of birth, Email addresses, IP addresses, Passwords, Usernames
In approximately July 2016, the manga website known as mangafox.me suffered a data breach. The vBulletin based forum exposed 1.3 million accounts including usernames, email and IP addresses, dates of birth and salted MD5 password hashes.
Mangatoon (mangatoon.mobi)
Breach date: 2022-05-13
Accounts affected: 23040238
Data exposed: Auth tokens, Avatars, Email addresses, Genders, Names, Passwords, Social media profiles, Usernames
In May 2022, the Hong Kong based Manga service Mangatoon suffered a data breach that exposed 23M subscriber records. The breach exposed names, email addresses, genders, social media account identities, auth tokens from social logins and passwords stored as salted MD5 hashes. Mangatoon did not respond to multiple attempts to make contact regarding the breach.