Tiago2024180/eyewebdataset huggingface dataset:
T2 (t2tea.com)
Breach date: 2024-04-17
Accounts affected: 94584
Data exposed: Dates of birth, Email addresses, Names, Passwords, Phone numbers, Physical addresses, Purchases, Salutations
In April 2024, 95k records from the T2 tea store were posted to a popular hacking forum. Data included email and physical addresses, names, phone numbers, dates of birth, purchases and passwords stored as scrypt hashes.
TaiLieu (tailieu.vn)
Breach date: 2019-11-24
Accounts affected: 7327477
Data exposed: Dates of birth, Email addresses, Genders, Geographic locations, Names, Passwords, Phone numbers, Usernames
In November 2019, the Vietnamese education website TaiLieu allegedly suffered a data breach exposing 7.3M customer records. Impacted data included names and usernames, email addresses, dates of birth, genders and passwords stored as unsalted MD5 hashes. The data was provided to HIBP by dehashed.com after being shared on a popular hacking forum. TaiLieu did not respond when contacted about the incident.
Tamodo (tamodo.com)
Breach date: 2020-02-28
Accounts affected: 494945
Data exposed: Dates of birth, Email addresses, Genders, Geographic locations, IP addresses, Names, Passwords
In February 2020, the affiliate marketing network Tamodo suffered a data breach which was subsequently shared on a popular hacking forum. The incident exposed almost 500k accounts including names, email addresses, dates of birth and passwords stored as bcrypt hashes. Tamodo failed to respond to multiple attempts to report the breach via published communication channels.
Tangerine (tangerinetelecom.com.au)
Breach date: 2024-02-18
Accounts affected: 243462
Data exposed: Dates of birth, Email addresses, Names, Passwords, Phone numbers, Physical addresses, Salutations
In February 2024, the Australian Telco Tangerine suffered a data breach that exposed over 200k customer records. Attributed to a legacy customer database, the data included physical and email addresses, names, phone numbers and dates of birth. Whilst the Tangerine login process involves sending a one-time password after entering an email address and phone number, it previously used a traditional password which was also exposed as a bcrypt hash.
Taobao (taobao.com)
Breach date: 2012-01-01
Accounts affected: 21149008
Data exposed: Email addresses, Passwords
In approximately 2012, it's alleged that the Chinese shopping site known as Taobao suffered a data breach that impacted over 21 million subscribers. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains email addresses and plain text passwords. Read more about Chinese data breaches in Have I Been Pwned.
TAP Air Portugal (flytap.com)
Breach date: 2022-08-25
Accounts affected: 6083479
Data exposed: Dates of birth, Email addresses, Genders, Names, Nationalities, Phone numbers, Physical addresses, Salutations, Spoken languages
In August 2022, the Portuguese airline TAP Air Portugal was the target of a ransomware attack perpetrated by the Ragnar Locker gang who later leaked the compromised data via a public dark web site. Over 5M unique email addresses were exposed alongside other personal data including names, genders, DoBs, phone numbers and physical addresses.
Tappware (tappware.com)
Breach date: 2024-04-23
Accounts affected: 94734
Data exposed: Dates of birth, Email addresses, Genders, Government issued IDs, Job titles, Names, Phone numbers, Physical addresses, Religions
In April 2024, a substantial volume of data was taken from the Bangladeshi IT services provider Tappware and published to a popular hacking forum. Comprising of 95k unique email addresses, the data also included extensive labour information on local citizens including names, physical addresses, job titles, dates of birth, genders and scans of government issued national identity (NID) cards.
Taringa (taringa.net)
Breach date: 2017-08-01
Accounts affected: 27971100
Data exposed: Email addresses, Passwords, Usernames
In September 2017, news broke that Taringa had suffered a data breach exposing 28 million records. Known as "The Latin American Reddit", Taringa's breach disclosure notice indicated the incident dated back to August that year. The exposed data included usernames, email addresses and weak MD5 hashes of passwords.
Team SoloMid (solomid.net)
Breach date: 2014-12-22
Accounts affected: 442166
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In December 2014, the electronic sports organisation known as Team SoloMid was hacked and 442k members accounts were leaked. The accounts included email and IP addresses, usernames and salted hashes of passwords.
Technic (technicpack.net)
Breach date: 2018-11-30
Accounts affected: 265410
Data exposed: Chat logs, Email addresses, IP addresses, Passwords, Private messages, Time zones
In November 2018, the Minecraft modpack platform known as Technic suffered a data breach. Technic promptly disclosed the breach and advised that the impacted data included over 265k unique users' email and IP addresses, chat logs, private messages and passwords stored as bcrypt hashes with a work factor of 13. Technic self-submitted the breach to HIBP.
Teespring (teespring.com)
Breach date: 2020-04-01
Accounts affected: 8234193
Data exposed: Email addresses, Geographic locations, Names, Social media profiles
In April 2020, the custom printed apparel website Teespring suffered a data breach that exposed 8.2 million customer records. The data included email addresses, names, geographic locations and social media IDs.
TehetségKapu (tehetsegkapu.hu)
Breach date: 2025-03-26
Accounts affected: 54357
Data exposed: Email addresses, Names, Usernames
In March 2025, almost 55k records were breached from the Hungarian education office website TehetségKapu. The data was subsequently published to a popular hacking forum and included email addresses, names and usernames.
Telecom Regulatory Authority of India (trai.gov.in)
Breach date: 2015-04-27
Accounts affected: 107776
Data exposed: Email addresses, Email messages
In April 2015, the Telecom Regulatory Authority of India (TRAI) published tens of thousand of emails sent by Indian citizens supporting net neutrality as part of the SaveTheInternet campaign. The published data included lists of emails including the sender's name and email address as well as the contents of the email as well, often with signatures including other personal data.
Teracod (teracod.org)
Breach date: 2016-05-28
Accounts affected: 97151
Data exposed: Avatars, Email addresses, IP addresses, Passwords, Payment histories, Private messages, Usernames, Website activity
In May 2015, almost 100k user records were extracted from the Hungarian torrent site known as Teracod. The data was later discovered being torrented itself and included email addresses, passwords, private messages between members and the peering history of IP addresses using the service.
Terravision (terravision.eu)
Breach date: 2023-02-01
Accounts affected: 2075625
Data exposed: Dates of birth, Email addresses, Geographic locations, Names, Passwords, Phone numbers
In February 2023, the European airport transfers service Terravision suffered a data breach. The breach exposed over 2M records of customer data including names, phone numbers, email addresses, salted password hashes and in some cases, date of birth and country of origin. Terravision did not respond to multiple attempts by individuals period over a period of months to report the incident.
Tesco (tesco.com)
Breach date: 2014-02-12
Accounts affected: 2239
Data exposed: Email addresses, Passwords, Reward program balances
In February 2014, over 2,000 Tesco accounts with usernames, passwords and loyalty card balances appeared on Pastebin. Whilst the source of the breach is not clear, many confirmed the credentials were valid for Tesco and indeed they have a history of poor online security.
TGBUS (tgbus.com)
Breach date: 2017-09-01
Accounts affected: 10371766
Data exposed: Email addresses, Passwords, Usernames
In approximately 2017, it's alleged that the Chinese gaming site known as TGBUS suffered a data breach that impacted over 10 million unique subscribers. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains usernames, email addresses and salted MD5 password hashes and was provided with support from dehashed.com. Read more about Chinese data breaches in Have I Been Pwned.
The Botting Network (thebotnet.com)
Breach date: 2012-08-12
Accounts affected: 96320
Data exposed: Dates of birth, Email addresses, Passwords, Usernames
In August 2012, the forum for making money with botting "The Botting Network" suffered a data breach that exposed 96k user records. The now defunct vBulletin forum leaked 96k email addresses, usernames, dates of birth and salted MD5 password hashes.
The Candid Board (thecandidboard.com)
Breach date: 2015-09-03
Accounts affected: 178201
Data exposed: Dates of birth, Email addresses, Geographic locations, IP addresses, Passwords, Usernames, Website activity
In September 2015, the non-consensual voyeurism site "The Candid Board" suffered a data breach. The hack of the vBulletin forum led to the exposure of over 178k accounts along with email and IP addresses, dates of birth and salted passwords hashed with MD5.
The Club Penguin Experience (thecpexperience.com)
Breach date: 2024-10-14
Accounts affected: 6342
Data exposed: Age groups, Email addresses, Password hints, Passwords, Usernames
In October 2024, The Club Penguin Experience (TCPE) suffered a data breach. The incident exposed over 6k subscribers' email addresses alongside usernames, age groups, passwords stored as bcrypt hashes and in some cases, plain text password hints. TCPE sent prompt disclosure notices to impacted customers following the breach.
The Fappening (thefappening.so)
Breach date: 2015-12-01
Accounts affected: 179030
Data exposed: Email addresses, Passwords, Usernames
In December 2015, the forum for discussing naked celebrity photos known as "The Fappening" (named after the iCloud leaks of 2014) was compromised and 179k accounts were leaked. Exposed member data included usernames, email addresses and salted hashes of passwords.
The Fly on the Wall (theflyonthewall.com)
Breach date: 2017-12-31
Accounts affected: 84011
Data exposed: Age groups, Credit cards, Email addresses, Genders, Names, Passwords, Phone numbers, Physical addresses, Purchases, Usernames
In December 2017, the stock market news website The Fly on the Wall suffered a data breach. The data in the breach included 84k unique email addresses as well as purchase histories and credit card data. Numerous attempts were made to contact The Fly on the Wall about the incident, however no responses were received.
The Halloween Spot (thehalloweenspot.com)
Breach date: 2019-09-27
Accounts affected: 10653
Data exposed: Email addresses, IP addresses, Names, Phone numbers, Physical addresses, Purchases
In September 2019, the Halloween costume store The Halloween Spot suffered a data breach. Originally misattributed to fancy dress store Smiffys, the breach contained 13GB of data with over 10k unique email addresses alongside names, physical and IP addresses, phone numbers and order histories. The Halloween Spot advised customers the breach was traced back to "an old shipping information database".
The Heritage Foundation (heritage.org)
Breach date: 2024-07-09
Accounts affected: 72004
Data exposed: Email addresses, IP addresses, Names, Passwords, Usernames
In July 2024, hacktivists published almost 2GB of data taken from The Heritage Foundation and their media arm, The Daily Signal. The data contained 72k unique email addresses, primarily used for commenting on articles (along with names, IP addresses and the comments left) and by content contributors (along with usernames and passwords stored as either MD5 or phpass hashes).
The Kodi Foundation (kodi.tv)
Breach date: 2023-02-16
Accounts affected: 400635
Data exposed: Browser user agent details, Dates of birth, Email addresses, IP addresses, Passwords, Private messages, Usernames
In February 2023, The Kodi Foundation suffered a data breach that exposed more than 400k user records. Attributed to an account belonging to "a trusted but currently inactive member of the forum admin team", the breach involved the administrator account creating a database backup that was subsequently downloaded before being sold on a hacking forum. The breach exposed email and IP addresses, usernames, genders and passwords stored as MyBB salted hashes. The Kodi Foundation elected to self-submit impacted email addresses to HIBP.
The Post Millennial (thepostmillennial.com)
Breach date: 2024-05-02
Accounts affected: 56973345
Data exposed: Email addresses, Genders, IP addresses, Names, Passwords, Phone numbers, Physical addresses, Usernames
In May 2024, the conservative news website The Post Millennial suffered a data breach. The breach resulted in the defacement of the website and links posted to 3 different corpuses of data including hundreds of writers and editors (IP, physical address and email exposed), tens of thousands of subscribers to the site (name, email, username, phone and plain text password exposed), and tens of millions of email addresses from thousands of mailing lists alleged to have been used by The Post Millennial (this has not been independently verified). The mailing lists appear to be sourced from various campaigns not necessarily run by The Post Millennial and contain a variety of different personal attributes including name, phone and physical address (depending on the campaign). The data was subsequently posted to a popular hacking forum and extensively torrented.
The Real World (therealworld.net)
Breach date: 2024-11-15
Accounts affected: 324382
Data exposed: Chat logs, Email addresses, Usernames
In November 2024, the online course founded by Andrew Tate known as "The Real World" (previously "Hustler's University" suffered a data breach that exposed almost 325k users of the platform. The impacted data was limited to usernames, email addresses and chat logs.
TheGradCafe (thegradcafe.com)
Breach date: 2023-02-26
Accounts affected: 310975
Data exposed: Email addresses, Genders, Geographic locations, IP addresses, Names, Passwords, Phone numbers, Physical addresses, Usernames
In February 2023, the grad school admissions search website TheGradCafe suffered a data breach that disclosed the personal records of 310k users. The data included email addresses, names and usernames, genders, geographic locations and passwords stored as bcrypt hashes. Some records also included physical address, phone number and date of birth. TheGradCafe did not respond to multiple attempts to disclose the breach.
Thermomix Recipe World Forum (rezeptwelt.de)
Breach date: 2025-01-30
Accounts affected: 3123439
Data exposed: Bios, Dates of birth, Email addresses, Names, Phone numbers, Physical addresses, Usernames
In January 2025, the Rezeptwelt (German for "recipe world") forum for Thermomix owners suffered a data breach. The incident exposed 3.1M registered users' details including names, email and physical addresses, phone numbers, dates of birth and bios (usually cooking related).
TheSqua.re (thesqua.re)
Breach date: 2025-06-27
Accounts affected: 107041
Data exposed: Email addresses, Geographic locations, Names, Phone numbers
In June 2025, 107k unique customer email addresses were allegedly obtained from TheSqua.re, the "easiest way to find your next serviced apartment". The data also included names, phone numbers and cities which were subsequently posted to a popular hacking forum. TheSqua.re did not respond to repeated attempts to disclose the incident, however multiple impacted HIBP subscribers confirmed the legitimacy and accuracy of the data.
TheTVDB.com (thetvdb.com)
Breach date: 2017-11-21
Accounts affected: 181871
Data exposed: Email addresses, Passwords, Usernames
In November 2017, the open television database known as TheTVDB.com suffered a data breach. The breached data was posted to a hacking forum and included 182k records with usernames, email addresses and MySQL password hashes.
Thingiverse (thingiverse.com)
Breach date: 2020-10-13
Accounts affected: 228102
Data exposed: Dates of birth, Email addresses, IP addresses, Names, Passwords, Physical addresses, Usernames
In October 2021, a database backup taken from the 3D model sharing service Thingiverse began extensively circulating within the hacking community. Dating back to October 2020, the 36GB file contained 228 thousand unique email addresses, mostly alongside comments left on 3D models. The data also included usernames, IP addresses, full names and passwords stored as either unsalted SHA-1 or bcrypt hashes. In some cases, physical addresses was also exposed. Thingiverse's owner, MakerBot, is aware of the incident but at the time of writing, is yet to issue a disclosure statement. The data was provided to HIBP by dehashed.com.
ThisHabbo Forum (thishabboforum.com)
Breach date: 2014-01-01
Accounts affected: 612414
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In 2014, the ThisHabbo forum (a fan site for Habbo.com, a Finnish social networking site) appeared among a list of compromised sites which has subsequently been removed from the internet. Whilst the actual date of the exploit is not clear, the breached data includes usernames, email addresses, IP addresses and salted hashes of passwords. A further 584k records were added from a more comprehensive breach file provided in October 2016.
Tianya (tianya.cn)
Breach date: 2011-12-26
Accounts affected: 29020808
Data exposed: Email addresses, Names, Usernames
In December 2011, China's largest online forum known as Tianya was hacked and tens of millions of accounts were obtained by the attacker. The leaked data included names, usernames and email addresses.
Tibber (tibber.com)
Breach date: 2024-11-10
Accounts affected: 50002
Data exposed: Email addresses, Geographic locations, Names, Purchases
In November 2024, the German electricity provider Tibber suffered a data breach that exposed the personal information of 50k customers. The data included names, email addresses, geographic locations (city and postcode) and total spend on purchases.
Ticketcounter (ticketcounter.nl)
Breach date: 2021-02-22
Accounts affected: 1921722
Data exposed: Bank account numbers, Dates of birth, Email addresses, Genders, IP addresses, Names, Payment histories, Phone numbers, Physical addresses
In August 2020, the Dutch ticketing service Ticketcounter inadvertently published a database backup to a publicly accessible location where it was then found and downloaded in February 2021. The data contained 1.9M unique email addresses which were offered for sale on a hacking forum and in some cases included names, physical and IP addresses, genders, dates of birth, payment histories and bank account numbers. Ticketcounter was later held to ransom with the threat of the breached being released publicly.
Ticketek (ticketek.com.au)
Breach date: 2024-05-31
Accounts affected: 17643173
Data exposed: Dates of birth, Email addresses, Genders, Names, Passwords, Salutations
In May 2024, the Australian event ticketing company Ticketek reported a data breach linked to a third party cloud-based platform. The following month, the data appeared for sale on a popular hacking forum and was later linked to a series of breaches of the Snowflake cloud storage service. The data contained almost 30M rows with 17.6M unique email addresses alongside names, genders, dates of birth and hashed passwords.
Ticketfly (ticketfly.com)
Breach date: 2018-05-31
Accounts affected: 26151608
Data exposed: Email addresses, Names, Phone numbers, Physical addresses
In May 2018, the website for the ticket distribution service Ticketfly was defaced by an attacker and was subsequently taken offline. The attacker allegedly requested a ransom to share details of the vulnerability with Ticketfly but did not receive a reply and subsequently posted the breached data online to a publicly accessible location. The data included over 26 million unique email addresses along with names, physical addresses and phone numbers. Whilst there were no passwords in the publicly leaked data, Ticketfly later issued an incident update and stated that "It is possible, however, that hashed values of password credentials could have been accessed".
Tigo (tigo.chat)
Breach date: 2023-03-31
Accounts affected: 700394
Data exposed: Device information, Email addresses, Genders, Geographic locations, IP addresses, Names, Private messages, Profile photos, Usernames
In Mid-2023, 300GB of data containing over 100M records from the Chinese video chat platform "Tigo" dating back to March that year was discovered. The data contained over 700k unique names, usernames, email and IP addresses, genders, profile photos and private messages. Tigo did not respond to multiple attempts to disclose the incident.
TISZA Világ (tiszavilag.hu)
Breach date: 2025-10-06
Accounts affected: 198520
Data exposed: Email addresses, Names, Phone numbers, Physical addresses, Usernames
In late October 2025, data breached from the Hungarian political party TISZA was published online before being extensively redistributed. Stemming from a compromise of the TISZA Világ service earlier in the month, the breach exposed 200k records of personal data including email addresses along with names, phone numbers and physical addresses.
TNAFlix (tnaflix.com)
Breach date: 2022-06-01
Accounts affected: 1374344
Data exposed: Email addresses, IP addresses, Passwords, Usernames
In June 2022, the adult website TNAFlix suffered a data breach that was later redistributed as part of a larger corpus of data. The data included 1.4M records of email and IP addresses, usernames and plain text passwords.
Tokopedia (tokopedia.com)
Breach date: 2020-04-17
Accounts affected: 71443698
Data exposed: Dates of birth, Email addresses, Genders, Names, Passwords
In April 2020, Indonesia's largest online store Tokopedia suffered a data breach. The incident resulted in 15M rows of data being posted to a popular hacking forum. An additional 76M rows were later provided to HIBP in July 2020. In total, the data included over 71M unique email addresses alongside names, genders, birth dates and passwords stored as SHA2-384 hashes.
ToonDoo (toondoo.com)
Breach date: 2019-08-21
Accounts affected: 6002694
Data exposed: Email addresses, Genders, Geographic locations, IP addresses, Passwords, Usernames
In August 2019, the comic strip creation website ToonDoo suffered a data breach. The data was subsequently redistributed on a popular hacking forum in November where the personal information of over 6M subscribers was shared. Impacted data included email and IP addresses, usernames, genders, the location of the individual and salted password hashes.
Torrent Invites (torrent-invites.com)
Breach date: 2013-12-12
Accounts affected: 352120
Data exposed: Dates of birth, Email addresses, IP addresses, Passwords, Usernames, Website activity
In December 2013, the torrent site Torrent Invites was hacked and over 352k accounts were exposed. The vBulletin forum contained usernames, email and IP addresses, birth dates and salted MD5 hashes of passwords.
Toumei (toumei.co.jp)
Breach date: 2023-10-18
Accounts affected: 76682
Data exposed: Email addresses, Names, Phone numbers, Physical addresses
In October 2023, the Japanese consultancy firm Toumei suffered a data breach. The breach exposed over 100M lines and 10GB of data including 77k unique email addresses along with names, phone numbers and physical addresses.
Tout (tout.com)
Breach date: 2014-09-11
Accounts affected: 652683
Data exposed: Bios, Email addresses, Geographic locations, IP addresses, Names, Passwords, Usernames
In approximately September 2014, the now defunct social networking service Tout suffered a data breach. The breach subsequently appeared years later and included 653k unique email addresses, names, IP addresses, the location of the user, their bio and passwords stored as bcrypt hashes.