In January 2019, the web was hit by five subsequent data breach collections dubbed "Collections" - collection #1 through #5. The data in these collections of data breaches includes usernames, email addresses and passwords vetted from thousands of data breaches from all kinds of information systems, so due to the difficulty of explicitly verifying the data breach, this data breach has been flagged as unverified.

Breach date: January 2019

Compromised data: Email addresses, Passwords

In 2016, a huge list of stolen digital information appeared in a list that was referred to as "Exploit.in". It is speculated that this list has been created by aggrevating data from other data breaches and has been used in attacks known as credential stuffing.

Breach date: 2016

Compromised data: Email Addresses, Passwords

In January 2019, the web was hit by five subsequent data breach collections dubbed "Collections" - collection #1 through #5. The data in these collections of data breaches includes usernames, email addresses and passwords vetted from thousands of data breaches from all kinds of information systems, so due to the difficulty of explicitly verifying the data breach, this data breach has been flagged as unverified.

Breach date: January 2019

Compromised data: Usernames, Email addresses, Passwords

The AntiPublic Combo List is a massive database of email addresses and passwords created by aggregating data from different data breaches.

Breach date: December 2016

Compromised data: Email addresses, Passwords

It is alleged that MySpace suffered a data breach in June 2013. After the incident MySpace data was being sold online - despite the fact that this data breach dates back several years, according to security researchers this breach was thought to be one of the biggest at the time when it was found out. When MySpace found out about the incident, they quickly resetted passwords of their users and said that they take the security and privacy of their customer data extremely seriously.

Breach date: June 2013

Compromised data: Usernames, Email addresses, Passwords

"EU & Russian AntiPublic" is known as an another list of stolen information created by aggregating data from different data breaches.

Breach date: Unknown

Compromised data: Email addresses, Passwords

NetEase, a Chinese technology company that provides online services focusing on content, communications, community and commerce, suffered a data breach in October 2015. After NetEase was breached, its data was subsequently published on the web - the leaked data also includes data of NetEase subsidiary companies.

Breach date: October 2015

Compromised data: Email addresses, Passwords

Adobe was breached in October 2013. When the team discovered the data breach, they said that the data breach involved illegal access of customer information as well as the source code for numerous Adobe products. The team also said that they believe that the attackers may have been able to remove certain information about millions of their customers.

Breach date: October 2013

Compromised data: Usernames, Email addresses, Passwords, Password reminders

News of Zynga being breached surfaced at the end of September of 2019 when a hacker claimed to have obtained data on hundreds of millions of its users. A Zynga representative said the team has taken the steps necessary to protect players' logins from unauthorized access.

Breach date: September 2019

Compromised data: Usernames, Email addresses, Registration dates, Last visit dates, Phone numbers, Passwords

"Pemiblanc" is known as an another list of stolen information created by aggregating data from different data breaches.

Breach date: April 2018

Compromised data: Email addresses, Passwords

Rambler, a Russian service providing search, news, email and advertising services, announced that their systems have been breached in 2016. The data apparently surfaced in March 2014. After the company knew about the incident, they issued a response where they said that they have added a mobile phone verification option and are constantly reminding their users about the necessity of changing passwords. They have also forbidden the use of previously used passwords for the same account.

Breach date: March 2014

Compromised data: Usernames, Passwords

In 2017, Edmodo suffered a data breach. After the breach was discovered, Edmodo sent out notifications to all of their users stating that safeguarding the trust and security of their users is of their utmost importance. They quickly retained information security experts to investigate the incident and reported the incident to law enforcement.

Breach date: 2017

Compromised data: Email addresses, Usernames, Passwords

The breach of Russia's biggest social networking site - VK - had surfaced in 2016. Appearantly breached in 2013, the data appeared on dark web marketplaces three years later and was eventually made public.

Breach date: 2013

Compromised data: Full names, Email addresses, Phone numbers, Passwords

LinkedIn apparently suffered a data breach in 2012. Initially the data breach came to light with 6.5 million people at risk, but it was later discovered that the breach was far worse than advertised - there were over 75 million records in the breach (duplicates excluded).

Breach date: 2012

Compromised data: Email addresses, Passwords

tumblr apparently suffered a data breach in 2013, but they became aware of a breach of their systems in May 2016. According to tumblr, their team thoroughly investigated the matter and said that their analysis does not give them a reason to believe that the leaked data was used to access tumblr accounts, but they still required affected tumblr users to set a new password as a precaution.

Breach date: 2013

Compromised data: Email addresses, Passwords

Neopets is a website that is owned by a games company JumpStart. The website allows players to care for digital "pets" and use virtual currency to buy items for them. It is speculated that the website suffered a data breach in October 2013.

Breach date: October 2013

Compromised data: Usernames, Email addresses, IP addresses, Passwords, Countries, Birth dates, Genders

In 2012, DropBox suffered a data breach. After the breach was discovered, DropBox sent out notifications to all of their users who had not changed their passwords since 2012. This breach appears to be the result of password reuse.

Breach date: 2012

Compromised data: Email addresses, Passwords

It is alleged that Zoosk suffered a data breach in 2011. The breached data includes usernames, email addresses and passwords hashed with the MD5 algorithm. The breach was allegedly accomplished by exploiting vulnerabilities in the website's outdated software. The entire data set was put on sale on a dark web market shortly after, the data became public soon.

Breach date: 2011

Compromised data: Registration dates, Usernames, Email addresses, Passwords

In 2018, a diet and exercise community MyFitnessPal suffered a data breach that affected almost 150 million customers. The publicly listed data had almost 50 million records including email addresses and plain text passwords. After the breach MyFitnessPal data was listed for sale on a dark web marketplace. After learning of the breach, MyFitnessPal reset the passwords of all of their users and said they encourage strong password practices including unique and complex passwords for all of their users.

Breach date: February 2018

Compromised data: Email addresses, Passwords

In October 2016, a data management and monetization services provider Modern Business Solutions suffered a data breach due to a poorly secured MongoDB installation. The data was apparently posted on the web for anyone to download shortly after.

Breach date: October 2016

Compromised data: Full names, Email addresses, Genders, ZIP codes, States, Cities, Addresses, Occupations

In March 2012, Last.FM suffered a data breach. Three months after the breach, Last.FM had issued a statement where the team asked all of their users to immediately change their passwords. It seems that the passwords were hashed with a weak algorithm - MD5 without a salt allowing the majority of the passwords to be rapidly cracked.

Breach date: March 2012

Compromised data: Usernames, Email addresses, Passwords, Other information

Ashley Madison was hacked in July 2015 by a hacker group who called themselves "The Impact Team". Shortly after, the Ashley Madison team said that they closed unauthorized access points and informed their users that they are working with law enforcement agencies.

Breach date: July 2015

Compromised data: Email addresses, Passwords

In december 2011, one of the most popular Chinese discussion forums - Tianya - suffered a data breach. The breach is believed to be part of a series of attacks directed at Chinese websites.

Breach date: December 2011

Compromised data: Email addresses, Usernames, Passwords

Breach date: March 2019

Compromised data: Phone numbers, Birth dates, Last visit dates, Genders, Countries, Full names, Email addresses

SheIn was a women's fashion retailer. The service suffered a data breach in June 2018, but the breach was not discovered until August 2018. The company said that there is no evidence that any credit card information was taken from their systems and stated that their system typically does not store such information.

Breach date: June 2018

Compromised data: Email addresses, Passwords

17.Media was a video streaming platform - the platform suffered a data breach in March 2016. The data leak included more than 20 million records - it was originally put for sale on a dark web market, after some time it became public.

Breach date: March 2016

Compromised data: Usernames, Email addresses, Passwords, Phone models, Phone software versions

In October 2017, Disqus issued a public disclosure statement saying that they were alerted to a security breach. The company stated that a snapshot of their user database from 2012, including information dating back to 2007, was exposed. Additionally, the breach included passwords for about one-third of users.

Breach date: October 2017

Compromised data: Email addresses, Usernames, Passwords

In 2015, 000webhost suffered a data breach. According to 000webhost, their systems were breached when a hacker used an exploit in an old PHP version.

Breach date: October 2015

Compromised data: Email addresses, Usernames, IP addresses, Passwords

Lifeboat ran servers for custom multiplayer environments of the smartphone version of Minecraft which allowed players to participate in different game modes. The website was apparently breached in January 2016 - after the company found out about the data breach, they thought that the best thing to do was to quietly force password resets upon their users which they did over a period of some weeks. It is worth noting that Lifeboat could have done a better job of securing the information of their users - the passwords were hashed using the MD5 algorithm which can easily be cracked by hackers.

Breach date: January 2016

Compromised data: Usernames, Email addresses, Passwords

Mate1 is an online dating website simillar to its famous counterpart Ashley Madison. The service was breached in 2015 - the breached data has surfaced on the dark web shortly after the service was hacked. Initially the data was being sold for 20 bitcoins (about 8,400 USD at the time), after a while it became public.

Breach date: November 2015

Compromised data: Usernames, Email addresses, Passwords, Birth dates

bitly suffered a data breach in May 2014. Although the company said they have no proof of unauthorized access to any accounts, they have taken steps to ensure the security of their users.

Breach date: May 2014

Compromised data: Email addresses, Usernames, Passwords

Breach date: December 2011

Compromised data: Usernames, Passwords

In 2017, WeHeartIt was alerted to a possible data breach. After learning of the incident, the company sent out emails to affected users to alert them of the data breach and asked the users to change their password if it has not been changed since 2013.

Breach date: November 2013

Compromised data: Email addresses, Usernames, Passwords

7k7k became a victim of a cyber attack in December 2011. The attack was thought to be a part of a series of attacks that targeted various Chinese IT portals.

Breach date: December 2011

Compromised data: Email addresses, Passwords

Xat suffered a data breach in november 2015. After the service got hacked, it released a public statement where the company representatives said that the team had shut down their servers for analysis and are working on replacing the old servers with new ones. Xat quickly acquired new servers and resumed operations.

Breach date: November 2015

Compromised data: Usernames, Email addresses, IP addresses, Passwords

In early 2014, Snapchat data was published on a website. The hackers reportedly gained access to the Snapchat data through a vulnerability disclosed by a group of security researchers. After some time Snapchat said that they have secured their platform - they apparently implemented various safeguards and added additional countermeasures to combat spam and abuse.

Breach date: January 2014

Compromised data: Usernames, Phone numbers, Areacodes, Social media information

Breach date: September 2014

Compromised data: Email addresses, Passwords

Breach date: Unknown

Compromised data: Email addresses, Passwords

Breach date: 2015

Compromised data: Email addresses, Passwords

xSplit suffered a data breach in June 2015. After the breach was discovered, the company said that no PayPal or credit card payment information is stored alongside user data, but still urged their users to immediately reset their passwords.

Breach date: June 2015

Compromised data: Full names, Usernames, Email addresses, Passwords

Breach date: August 2016

Compromised data: Usernames, Email addresses, Passwords, Security questions, Full names, Addresses, Payment information, Dates of Birth, Genders, Social security numbers, Registration dates

The company Reality Squared Games (R2Games) apparently suffered a data breach in November 2015 - the data breach is one of a series affecting all forums managed by R2Games. The company developed games for Android and iOS platforms.

Breach date: November 2015

Compromised data: Usernames, Email addresses, IP addresses, Passwords

The gaming forum known as CD Projekt RED apparently suffered a data breach in March 2016. Upon examining data at their disposal, the CD Projekt RED team said that they can conclude that an unauthorized party gained access to their old forum database.

Breach date: March 2016

Compromised data: Email addresses, Usernames, Passwords

On November 2017, imgur was notified of a potential security breach. The breach affected email addresses and passwords - the imgur team said that the passwords could have been cracked due to an outdated hashing algorithm - SHA256 - which was used at the time.

Breach date: September 2013

Compromised data: Email addresses, Passwords

In 2015, the vBulletin-powered anime community known as Nihonomaru was hacked. Although passwords were hashed, they were hashed using a weak algorithm, enabling many to be rapidly cracked.

Breach date: April 2015

Compromised data: Email addresses, Usernames, IP addresses, Passwords

Breach date: January 2014

Compromised data: Usernames, Email addresses, IP addresses, Passwords

Breach date: November 2015

Compromised data: Usernames, Email addresses, IP addresses, Passwords

HLTV announced that their systems have been breached in June 2016. They alerted their users to a possibility that accounts could have been compromised and recommended their users to change their passwords.

Breach date: June 2016

Compromised data: Usernames, Email addresses, Passwords, Account creation dates, Last login dates, Other data

Breach date: May 2015

Compromised data: Usernames, Email addresses, IP addresses, Passwords

Nulled.io was a hacking forum that suffered a data breach in May 2016. It is likely the breach took place due to Nulled.io's use of the IPBoard community forum setup. According to ZDNet, the cyberattack was likely to cause some trouble for cybercriminals.

Breach date: May 2016

Compromised data: Email addresses, Usernames, IP addresses, Passwords, Private messages, Other information

Breach date: May 2015

Compromised data: Usernames, Email addresses, IP addresses, Passwords, Birth dates, Location, Security questions, Answers to security questions

Breach date: 2015

Compromised data: Email addresses, Passwords

Breach date: September 2015

Compromised data: Usernames, Email addresses, IP addresses, Passwords

Breach date: November 2014

Compromised data: Usernames, Email addresses, IP addresses, Passwords

The Sony PlayStation hacks and mods forum PS3Hax has apparently been hacked in July 2015. Although passwords were hashed and salted, the system utilized a weak password hashing algorithm enabling many to be rapidly cracked.

Breach date: July 2015

Compromised data: Usernames, Email addresses, IP addresses, Passwords

In 2014, the anti-virus software Avast! suffered a data breach. Shortly after learning of the breach, Avast! informed their customers that their information has been stolen and advised them to change their passwords. This data breach only affected the Avast! support forum.

Breach date: 2014

Compromised data: Email addresses, Usernames, Passwords

In June 2016, news website Torrent Freak reported a data breach that affected a popular torrent sharing service BitTorrent which owns uTorrent. The company said that the uTorrent community forums have been hacked, exposing the private details of thousands of users. According to the company, the hackers were able to get their hands on the user database - passwords used on this system should be considered compromised.

Breach date: January 2016

Compromised data: Email addresses, Usernames, IP addresses, Passwords

Breach date: December 2015

Compromised data: Email addresses, Passwords

Plex.tv is believed to have suffered a data breach in 2015. Shortly after the incident, Plex's team put their servers under thorough investigation conducted by forensic experts and identified the source of the compromise. According to Plex, the attackers gained entry via exploiting bugs in the forum software. After the investigation was completed, Plex resumed the operation of their forum.

Breach date: 2015

Compromised data: Usernames, Email addresses, IP addresses, Passwords

In 2016, PayAsUGym suffered a data breach that affected around 300 thousand customers. After the company learned of the incident, it spoke with cybersecurity professionals and advised all of their customers to change their passwords. It is speculated that the hackers breached the systems via a zero-day exploit.

Breach date: December 2016

Compromised data: Email Addresses, Passwords

MajorGeeks got hacked in September 2015. After the data breach, the data stolen from the MajorGeeks website was being traded online, after a while it became public.

Breach date: September 2015

Compromised data: Usernames, Email addresses, IP addresses, Passwords, Birth dates, Social network identifiers

Breach date: November 2014

Compromised data: Usernames, Email addresses, Passwords

Breach date: April 2014

Compromised data: Usernames, Email addresses, IP addresses

Breach date: October 2015

Compromised data: Email addresses, Addresses

Breach date: February 2016

Compromised data: Usernames, Email addresses, IP addresses, Passwords

Breach date: April 2015

Compromised data: Usernames, Email addresses, IP addresses, Passwords

Breach date: 2015

Compromised data: Email addresses, Usernames, Passwords

Breach date: February 2016

Compromised data: Email addresses, Usernames, IP addresses, Passwords

Arma3-Life was a gaming community dedicated to a game known as "Arma 3". The community grew rapidly and allegedly suffered a data breach in late 2015.

Breach date: December 2015

Compromised data: Email addresses, Usernames, IP addresses, Passwords, Messages, Birth dates, Social media handles, Donation amounts, Steam IDs, Other information

Breach date: October 2016

Compromised data: Usernames, Email addresses, IP addresses, Passwords

In November 2014, MalwareBytes had sent out emails to all of their customers stating that they figured out that a vulnerability in their forum software allowed a hacker to access sensitive information stored on their servers and forced all users to reset their passwords as a precautionary measure.

Breach date: November 2014

Compromised data: Usernames, Email addresses, IP addresses, Passwords

Delicious Takoyaki is a breach compilation allegedly consisting of multiple booter data breaches. Due to breach verification issues, this data breach has been classified as unverified.

Breach date: Unknown

Compromised data: Email addresses, Usernames, IP addresses, Passwords

Breach date: August 2016

Compromised data: Usernames, Email addresses, Passwords, Nationalities

Breach date: October 2011

Compromised data: YouTube usernames, Usernames, Email addresses, IP addresses, Passwords

Breach date: December 2010

Compromised data: Usernames, Email addresses, IP addresses, Passwords, Join dates, Last visit dates, Birth dates, Other information

Breach date: December 2014

Compromised data: Usernames, Email addresses, IP addresses, Passwords

In 2016, BitTorrent learned of a breach of their information systems. Upon investigation, they had confirmed that there was a security issue involving the vendor which powered their forum software - IPBoard. Attackers used the security flaw to download a list of forum users.

Breach date: January 2016

Compromised data: Usernames, Email addresses, IP addresses, Passwords

Breach date: February 2016

Compromised data: Usernames, Email addresses, IP addresses, Passwords, Birth dates, Social network IDs

Breach date: September 2013

Compromised data: Email addresses, Passwords

Breach date: July 2016

Compromised data: Usernames, Passwords

1337-Crew.to was a hacking forum which allegedly suffered a data breach in June 2013.

Breach date: June 2013

Compromised data: Email addresses, Usernames, IP addresses, Passwords, Other information

Breach date: 2015

Compromised data: Email addresses, IP addresses, Passwords, Birth dates, Forum information

Breach date: November 2013

Compromised data: Usernames, Email addresses, IP addresses, Passwords

Breach date: May 2016

Compromised data: Usernames, Email addresses, IP addresses, Private messages, Passwords, Forum plugin data, Subscription data, Other information

Breach date: Unknown

Compromised data: Email addresses, Usernames, Passwords

SiriusForum.net was a discussion forum which apparently suffered a data breach in the prime of its days - in 2016.

Breach date: 2016

Compromised data: Email addresses, Usernames, Passwords, Private messages, Plugin data, Other information

Breach date: August 2013

Compromised data: Usernames, Email addresses, IP addresses, Passwords, Private messages, Forum information

Breach date: August 2016

Compromised data: Usernames, Email addresses, Passwords

Breach date: July 2016

Compromised data: Email addresses, Usernames, Passwords

Breach date: September 2012

Compromised data: Usernames, Email addresses, IP addresses, Passwords, Registration dates, Last visit dates, Birth dates, Forum information

Breach date: Unknown

Compromised data: Usernames, Email addresses, Passwords

Breach date: Unknown

Compromised data: Usernames, Email addresses, IP addresses, Passwords, Private messages, Forum information

Breach date: July 2016

Compromised data: Usernames, Email addresses, Passwords

Breach date: February 2013

Compromised data: Email addresses, Passwords

Breach date: April 2016

Compromised data: Usernames, Email addresses, IP addresses, Passwords

Breach date: October 2016

Compromised data: Email addresses, Passwords

Breach date: Unknown

Compromised data: Email addresses, Usernames, Passwords

Breach date: December 2016

Compromised data: Usernames, Email addresses, IP addresses, Passwords, Private messages, Forum information

Citadel.sx was a forum that fuelled discussion about data breaches which allegedly suffered a data breach in August 2014. There are two Citadel.sx data breaches - an IPBoard forum breach and a breach that included passwords hashed with an algorithm known as Blowfish.

Breach date: August 2014

Compromised data: Email addresses, Usernames, IP addresses, Passwords

Citadel.sx was a forum that fuelled discussion about data breaches which allegedly suffered a data breach in August 2014. There are two Citadel.sx data breaches - an IPBoard forum breach and a breach that included passwords hashed with an algorithm known as Blowfish.

Breach date: August 2014

Compromised data: Email addresses, Usernames, IP addresses, Passwords

Breach date: Unknown

Compromised data: IP addresses