Tiago2024180/eyewebdataset huggingface dataset:
Condo.com (condo.com)
Breach date: 2019-06-01
Accounts affected: 1481555
Data exposed: Email addresses, Names, Phone numbers, Physical addresses
In June 2019, now defunct website Condo.com suffered a data breach that was later redistributed as part of a larger corpus of data. The impacted data included 1.5M email addresses alongside names, phone numbers and for a small number of records, physical addresses.
Convex (convex.ru)
Breach date: 2023-02-01
Accounts affected: 150129
Data exposed: Email addresses, IP addresses, Names, Phone numbers
In February 2023, the Russian telecommunications provider Convex was hacked by "Anonymous" who subsequently released 128GB of data publicly, alleging it revealed illegal government surveillance. The leaked data contained 150k unique email, IP and physical addresses, names and phone numbers.
Coupon Mom / Armor Games ()
Breach date: 2014-02-08
Accounts affected: 11010525
Data exposed: Email addresses, Passwords
In 2014, a file allegedly containing data hacked from Coupon Mom was created and included 11 million email addresses and plain text passwords. On further investigation, the file was also found to contain data indicating it had been sourced from Armor Games. Subsequent verification with HIBP subscribers confirmed the passwords had previously been used and many subscribers had used either Coupon Mom or Armor Games in the past. On disclosure to both organisations, each found that the data did not represent their entire customer base and possibly includes records from other sources with common subscribers. The breach has subsequently been flagged as "unverified" as the source cannot be emphatically proven. In July 2020, the data was also found to contain BeerAdvocate accounts sourced from a previously unknown breach.
Covve (covve.com)
Breach date: 2020-02-20
Accounts affected: 22802117
Data exposed: Email addresses, Job titles, Names, Phone numbers, Physical addresses, Social media profiles
In February 2020, a massive trove of personal information referred to as "db8151dd" was provided to HIBP after being found left exposed on a publicly facing Elasticsearch server. Later identified as originating from the Covve contacts app, the exposed data included extensive personal information and interactions between Covve users and their contacts. The data was provided to HIBP by dehashed.com.
Crack Community (crackcommunity.com)
Breach date: 2013-09-09
Accounts affected: 19210
Data exposed: Email addresses, IP addresses, Passwords, Usernames, Website activity
In late 2013, the Crack Community forum specialising in cracks for games was compromised and over 19k accounts published online. Built on the MyBB forum platform, the compromised data included email addresses, IP addresses and salted MD5 passwords.
Cracked.to (cracked.to)
Breach date: 2019-07-21
Accounts affected: 749161
Data exposed: Email addresses, IP addresses, Passwords, Private messages, Usernames
In July 2019, the hacking website Cracked.to suffered a data breach. There were 749k unique email addresses spread across 321k forum users and other tables in the database. A rival hacking website claimed responsibility for breaching the MyBB based forum which disclosed email and IP addresses, usernames, private messages and passwords stored as bcrypt hashes.
CrackingForum (crackingforum.com)
Breach date: 2016-07-01
Accounts affected: 660305
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In approximately mid-2016, the cracking community forum known as CrackingForum suffered a data breach. The vBulletin based forum exposed 660k email and IP addresses, usernames and salted MD5 hashes.
CraftRise (craftrise.com.tr)
Breach date: 2022-03-05
Accounts affected: 2532527
Data exposed: Email addresses, Geographic locations, Passwords, Usernames
In May 2023, news broke of a data breach of the Turkish Minecraft server known as CraftRise. The data of over 2.5M users was subsequently shared on a popular hacking forum and included email addresses, usernames, geographic locations and plain text passwords. The newest records indicate the data was obtained in March 2022.
Creams Cafe (creamscafe.com)
Breach date: 2025-05-01
Accounts affected: 159652
Data exposed: Email addresses, Names, Phone numbers, Physical addresses
In May 2025, 160k records of customer data was allegedly obtained from Creams Cafe, "the UK's favourite dessert parlour". The data included email and physical addresses, names and phone numbers. Creams Cafe did not respond to repeated attempts to disclose the incident, however multiple impacted HIBP subscribers confirmed the legitimacy and accuracy of the data.
Creative (creative.com)
Breach date: 2018-05-01
Accounts affected: 483015
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In May 2018, the forum for Singaporean hardware company Creative Technology suffered a data breach which resulted in the disclosure of 483k unique email addresses. Running on an old version of vBulletin, the breach also disclosed usernames, IP addresses and salted MD5 password hashes. After being notified of the incident, Creative permanently shut down the forum.
CrimeAgency vBulletin Hacks ()
Breach date: 2017-01-19
Accounts affected: 942044
Data exposed: Email addresses, Passwords, Usernames
In January 2016, a large number of unpatched vBulletin forums were compromised by an actor known as "CrimeAgency". A total of 140 forums had data including usernames, email addresses and passwords (predominantly stored as salted MD5 hashes), extracted and then distributed. Refer to the complete list of the forums for further information on which sites were impacted.
Cross Fire (cfire.mail.ru)
Breach date: 2016-08-08
Accounts affected: 12865609
Data exposed: Email addresses, Passwords, Usernames
In August 2016, the Russian gaming forum known as Cross Fire (or cfire.mail.ru) was hacked along with a number of other forums on the Russian mail provider, mail.ru. The vBulletin forum contained 12.8 million accounts including usernames, email addresses and passwords stored as salted MD5 hashes.
Crunchyroll (https://www.crunchyroll.com/)
Breach date: 2026-03-12
Accounts affected: 1195684
Data exposed: Email addresses
In March 2026, the anime streaming service Crunchyroll suffered a data breach alleged to have impacted 6.8M users. The exposed data is reported to have originated from the company's Zendesk support system where "name, login name, email address, IP address, general geographic location and the contents of the support tickets" were exposed. A subset of 1.2M email addresses from an alleged 2M record dataset being sold was later provided to HIBP.
CTARS (ctars.com.au)
Breach date: 2021-05-21
Accounts affected: 12314
Data exposed: Dates of birth, Email addresses, Genders, Names, Passwords, Personal health data, Phone numbers, Physical addresses, Salutations, Usernames
In May 2022, the client management system for the Australian government's NDIS (National Disability Insurance Scheme) suffered a data breach which was subsequently posted to an online hacking forum. The CTARS cloud platform is used by care providers to record information about NDIS participants and often contains sensitive medical information. Impacted data includes over 12k unique email addresses, physical addresses, names, dates of birth, phone numbers and data related to patient conditions and treatments.
Cultura (cultura.com)
Breach date: 2024-09-06
Accounts affected: 1462025
Data exposed: Email addresses, Names, Phone numbers, Physical addresses, Purchases
In September 2024, French retailer Cultura was the victim of a cyber attack they attributed to an external IT service provider. The resultant data breach included almost 1.5M unique email addresses along with names, phone numbers, physical addresses and orders. Cultura advised that all affected customers had been notified about the incident.
Cuties AI (cuties.ai)
Breach date: 2025-03-21
Accounts affected: 144250
Data exposed: Avatars, Display names, Email addresses
In March 2026, the NSFW AI companion platform Cuties AI suffered a data breach that was subsequently published to a public hacking forum. The incident exposed 144k unique email addresses along with display names, avatars, prompts and descriptions used to generate AI adult images, as well as URLs to the generated content. The data also included the account that created the content and a stated "preference" of either female or trans.
Cutout.Pro (cutout.pro)
Breach date: 2024-02-26
Accounts affected: 19972829
Data exposed: Email addresses, IP addresses, Names, Passwords
In February 2024, the AI-powered visual design platform Cutout.Pro suffered a data breach that exposed 20M records. The data included email and IP addresses, names and salted MD5 password hashes which were subsequently broadly distributed on a popular hacking forum and Telegram channels.
CyberServe (cyberserve.co.il)
Breach date: 2021-10-29
Accounts affected: 1107034
Data exposed: Dates of birth, Drinking habits, Email addresses, Family structure, Genders, Geographic locations, HIV statuses, IP addresses, Names, Passwords, Personal health data, Phone numbers, Physical attributes, Private messages, Profile photos, Religions, Sexual orientations, Smoking habits, Usernames
In October 2021, the Israeli hosting provider CyberServe was breached and ransomed before having a substantial amount of their customer data leaked publicly by a group known as "Black Shadow". Amongst the data was the LGBTQ dating site Atraf and the Machon Mor medical institute. Due to multiple different sites being compromised, the impacted data is broad and ranges from relationship information to medical data to email addresses and passwords stored in plain text. The data was made available to HIBP with support from May Brooks-Kempler, founder of the Think Safe Cyber community in Israel.
D3Scene (d3scene.com)
Breach date: 2016-01-01
Accounts affected: 568827
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In January 2016, the gaming website D3Scene, suffered a data breach. The compromised vBulletin forum exposed 569k million email addresses, IP address, usernames and passwords stored as salted MD5 hashes. The data was provided to HIBP by dehashed.com.
DaFont (dafont.com)
Breach date: 2017-05-16
Accounts affected: 637340
Data exposed: Email addresses, Passwords, Usernames
In May 2017, font sharing site DaFont suffered a data breach resulting in the exposure of 637k records. Allegedly due to a SQL injection vulnerability exploited by multiple parties, the exposed data included usernames, email addresses and passwords stored as MD5 without a salt.
Daily Quiz (dailyquiz.me)
Breach date: 2021-01-13
Accounts affected: 8032404
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In January 2021, the quiz website Daily Quiz suffered a data breach that exposed over 8 million unique email addresses. The data also included usernames, IP addresses and passwords stored in plain text.
Dailymotion (dailymotion.com)
Breach date: 2016-10-20
Accounts affected: 85176234
Data exposed: Email addresses, Passwords, Usernames
In October 2016, the video sharing platform Dailymotion suffered a data breach. The attack led to the exposure of more than 85 million user accounts and included email addresses, usernames and bcrypt hashes of passwords.
DailyObjects (dailyobjects.com)
Breach date: 2018-01-01
Accounts affected: 464260
Data exposed: Email addresses, Names, Passwords, Phone numbers, Physical addresses
In approximately January 2018, a collection of more than 464k customer records from the Indian online retailer DailyObjects were leaked online. The data included names, physical and email addresses, phone numbers and "pincodes" stored in plain text. After multiple attempts to contact them, DailyObjects responded and received a copy of the data for verification, however failed to respond to multiple contact attempts following that.
Dangdang (dangdang.com)
Breach date: 2011-06-01
Accounts affected: 4848734
Data exposed: Email addresses
In 2011, the Chinese e-commerce site Dangdang suffered a data breach. The incident exposed over 4.8 million unique email addresses which were subsequently traded online over the ensuing years.
DaniWeb (daniweb.com)
Breach date: 2015-12-01
Accounts affected: 1131636
Data exposed: Email addresses, IP addresses, Passwords
In late 2015, the technology and social site DaniWeb suffered a data breach. The attack resulted in the disclosure of 1.1 million accounts including email and IP addresses which were also accompanied by salted MD5 hashes of passwords. However, DaniWeb have advised that "the breached password hashes and salts are incorrect" and that they have since switched to new infrastructure and software.
Data & Leads (datanleads.com)
Breach date: 2018-11-14
Accounts affected: 44320330
Data exposed: Email addresses, Employers, IP addresses, Job titles, Names, Phone numbers, Physical addresses
In November 2018, security researcher Bob Diachenko identified an unprotected database believed to be hosted by a data aggregator. Upon further investigation, the data was linked to marketing company Data & Leads. The exposed Elasticsearch instance contained over 44M unique email addresses along with names, IP and physical addresses, phone numbers and employment information. No response was received from Data & Leads when contacted by Bob and their site subsequently went offline.
Data Enrichment Exposure From PDL Customer ()
Breach date: 2019-10-16
Accounts affected: 622161052
Data exposed: Email addresses, Employers, Geographic locations, Job titles, Names, Phone numbers, Social media profiles
In October 2019, security researchers Vinny Troia and Bob Diachenko identified an unprotected Elasticsearch server holding 1.2 billion records of personal data. The exposed data included an index indicating it was sourced from data enrichment company People Data Labs (PDL) and contained 622 million unique email addresses. The server was not owned by PDL and it's believed a customer failed to properly secure the database. Exposed information included email addresses, phone numbers, social media profiles and job history data.
Data Enrichment Records ()
Breach date: 2016-12-23
Accounts affected: 8176132
Data exposed: Buying preferences, Charitable donations, Credit status information, Dates of birth, Email addresses, Family structure, Financial investments, Home ownership statuses, Income levels, Job titles, Marital statuses, Names, Net worths, Phone numbers, Physical addresses, Political donations
In December 2016, more than 200 million "data enrichment profiles" were found for sale on the darknet. The seller claimed the data was sourced from Experian and whilst that claim was rejected by the company, the data itself was found to be legitimate suggesting it may have been sourced from other legitimate locations. In total, there were more than 8 million unique email addresses in the data which also contained a raft of other personal attributes including credit ratings, home ownership status, family structure and other fields described in the story linked to above. The email addresses alone were provided to HIBP.
Data Troll Stealer Logs ()
Breach date: 2025-06-20
Accounts affected: 109532219
Data exposed: Email addresses, Passwords
In June 2025, headlines erupted over a "16 billion password" breach. In reality, the dataset was a compilation of publicly accessible stealer logs, mostly repurposed from older leaks, with only a small portion of genuinely new material. HIBP received 2.7B rows containing 109M unique email addresses, which was subsequently added to the service under the name "Data Troll". The websites the stealer logs were captured against are searchable via the HIBP dashboard.
DataCamp (datacamp.com)
Breach date: 2017-01-30
Accounts affected: 760561
Data exposed: Email addresses, Geographic locations, IP addresses, Names, Passwords
In December 2018, the data science website DataCamp suffered a data breach of records dating back to January 2017. The incident exposed 760k unique email and IP addresses along with names and passwords stored as bcrypt hashes. In 2019, the data appeared listed for sale on a dark web marketplace (along with several other large breaches) and subsequently began circulating more broadly.
Date Hot Brunettes (datehotbrunettes.com)
Breach date: 2021-01-12
Accounts affected: 1494078
Data exposed: Bios, Email addresses, IP addresses, Passwords, Usernames
In January 2021, the now defunct website Date Hot Brunettes which provided a service to "Date Neglected Women Who Can Keep a Secret", suffered a data breach. The incident exposed 1.5M unique email addresses along with IP addresses, usernames, user-entered bios and MD5 password hashes.
DatPiff (datpiff.com)
Breach date: 2021-08-25
Accounts affected: 7476940
Data exposed: Email addresses, Passwords, Security questions and answers, Usernames
In late 2021, email address and plain text password pairs from the rap mixtape website DatPiff appeared for sale on a popular hacking forum. The data allegedly dated back to an earlier breach and in total, contained almost 7.5M email addresses and cracked password pairs. The original data source allegedly contained usernames, security questions and answers and passwords stored as MD5 hashes with a static salt.
Dave (dave.com)
Breach date: 2020-06-28
Accounts affected: 2964182
Data exposed: Dates of birth, Email addresses, Names, Passwords, Phone numbers, Physical addresses, Social security numbers
In June 2020, the digital banking app Dave suffered a data breach which exposed 7.5 million rows of data and subsequently appeared for public download on a hacking forum. The breach exposed extensive personal information including almost 3 million unique email addresses alongside names, dates of birth, encrypted social security numbers and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com.
dBforums (dbforums.com)
Breach date: 2016-07-04
Accounts affected: 363468
Data exposed: Dates of birth, Email addresses, IP addresses, Passwords, Usernames
In July 2016, a data breach of the now defunct database forum "dBforums" appeared for sale alongside several others hacked from the parent company, Penton. The breach of the vBulletin based forum contained 363k unique email addresses alongside usernames, IP addresses, dates of birth and salted MD5 password hashes.
DC Health Link (dchealthlink.com)
Breach date: 2023-03-06
Accounts affected: 48145
Data exposed: Citizenship statuses, Dates of birth, Email addresses, Employers, Ethnicities, Genders, Names, Phone numbers, Physical addresses, Purchases, Social security numbers
In March 2023, DC Health Link discovered a data breach that was later publicly posted to a popular data breach forum. The impacted data included 48k unique email addresses alongside names, genders, dates of birth, home addresses, phone numbers and social security numbers.and "IntelBroker".
Deezer (deezer.com)
Breach date: 2019-04-22
Accounts affected: 229037936
Data exposed: Dates of birth, Email addresses, Genders, Geographic locations, IP addresses, Names, Spoken languages, Usernames
In late 2022, the music streaming service Deezer disclosed a data breach that impacted over 240M customers. The breach dated back to a mid-2019 backup exposed by a 3rd party partner which was subsequently sold and then broadly redistributed on a popular hacking forum. Impacted data included 229M unique email addresses, IP addresses, names, usernames, genders, DoBs and the geographic location of the customer.
DemandScience by Pure Incubation (demandscience.com)
Breach date: 2024-02-28
Accounts affected: 121796165
Data exposed: Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses, Social media profiles
In early 2024, a large corpus of data from DemandScience (a company owned by Pure Incubation), appeared for sale on a popular hacking forum. Later attributed to a leak from a decommissioned legacy system, the breach contained extensive data that was largely business contact information aggregated from public sources. Specifically, the data included 122M unique corporate email addresses, physical addresses, phone numbers, employers and job titles. It also included names and for many individuals, a link to their LinkedIn profile.
Demon Forums (demonforums.net)
Breach date: 2019-02-20
Accounts affected: 52623
Data exposed: Email addresses, Passwords, Usernames
In February 2019, the hacking forum Demon Forums suffered a data breach. The compromise of the vBulletin forum exposed 52k unique email addresses alongside usernames and passwords stored as salted MD5 hashes.
Dennis Kirk (denniskirk.com)
Breach date: 2021-09-04
Accounts affected: 1356026
Data exposed: Email addresses, Geographic locations, Names, Phone numbers, Purchases
In October 2024, almost 20GB of data containing 1.3M unique email addresses from motorcycle supplies store Dennis Kirk was circulated. Dating back to September 2021, the data also contained purchases from the online store along with customer names, phone numbers and postcodes. Dennis Kirk did not respond to multiple attempts to make contact about the breach.
Descomplica (descomplica.com.br)
Breach date: 2021-03-14
Accounts affected: 4845378
Data exposed: Email addresses, Names, Partial credit card data, Passwords, Purchases
In March 2021, the Brazilian EdTech company Descomplica suffered a data breach which was subsequently posted to a popular hacking forum. The data included almost 5 million email addresses, names, the first 6 and last 4 digits and the expiry date of credit cards, purchase histories and password hashes.
Devil-Torrents.pl (devil-torrents.pl)
Breach date: 2021-01-04
Accounts affected: 63451
Data exposed: Email addresses, Passwords
In early 2021, the Polish torrents website Devil-Torrents.pl suffered a data breach. A subset of the data including 63k unique email addresses and cracked passwords were subsequently socialised on a popular data breach sharing service.
devkitPro (devkitpro.org)
Breach date: 2019-02-03
Accounts affected: 1508
Data exposed: Email addresses, Passwords, Private messages
In February 2019, the devkitPro forum suffered a data breach. The phpBB based forum had 1,508 unique email addresses exposed in the breach alongside forum posts, private messages and passwords stored as weak salted hashes. The data breach was self-submitted to HIBP by the forum operator.
diet.com (diet.com)
Breach date: 2014-08-10
Accounts affected: 1383759
Data exposed: Dates of birth, Eating habits, Email addresses, IP addresses, Names, Passwords, Physical attributes, Usernames
In August 2014, the diet and nutrition website diet.com suffered a data breach resulting in the exposure of 1.4 million unique user records dating back as far as 2004. The data contained email and IP addresses, usernames, plain text passwords and dietary information about the site members including eating habits, BMI and birth date. The site was previously reported as compromised on the Vigilante.pw breached database directory.
digiDirect (digidirect.com.au)
Breach date: 2024-09-29
Accounts affected: 304337
Data exposed: Dates of birth, Email addresses, Names, Phone numbers, Physical addresses
In September 2024, a data breach sourced from the Australian retailer digiDirect was published to a popular hacking forum. The breach exposed over 300k rows of data including email and physical address, name, phone number and date of birth. Approximately half the email addresses were on domains from external marketplaces including Amazon, eBay and Westfield.
Digimon (digimon.co.in)
Breach date: 2016-09-05
Accounts affected: 7687679
Data exposed: Email addresses, Email messages, IP addresses, Names
In September 2016, over 16GB of logs from a service indicated to be digimon.co.in were obtained, most likely from an unprotected Mongo DB instance. The service ceased running shortly afterwards and no information remains about the precise nature of it. Based on enquiries made via Twitter, it appears to have been a mail service possibly based on PowerMTA and used for delivering spam. The logs contained information including 7.7M unique email recipients (names and addresses), mail server IP addresses, email subjects and tracking information including mail opens and clicks.