Have I Been Pwned
@haveibeenpwned
Check if you have an email address or password that has been compromised in a data breach. Created and maintained by @troyhunt.
ID: 2191981764
https://haveibeenpwned.com 13-11-2013 09:27:23
934 Tweet
166,166K Followers
1 Following
New sensitive breach: Lexipol had 672k email addresses breached last month by self-proclaimed "Puppygirl Hacker Polycule". Data included name, phone and MD5 or SHA-256 password hashes. 23% were already in Have I Been Pwned. Read more: them.us/story/puppygir…
New sensitive breach: Spyware maker SpyX had almost 2M email addresses breached in June. The data also included IP address, country and what appears to be plain text iCloud credentials. 40% were already in Have I Been Pwned. Read more: techcrunch.com/2025/03/19/dat…
New breach: Troy Hunt's Mailchimp account was successfully phished and a subscriber list for his personal blog was exported. Data included 16k email and IP addresses, plus derived lat long and time zone. 75% were already in Have I Been Pwned. Read more: troyhunt.com/a-sneaky-phish…
New breach: German Doner Kebab had 162k unique email addresses publicly posted to a hacking forum last week. Data also included name, phone and physical addrress. 74% were already in Have I Been Pwned. Read more: x.com/DarkWebInforme…
New breach: Indonesian restaurant website Qraved had almost 1M email addresses breached in 2021. Data also included name, phone, DoB and MD5 password hash. 83% were already in Have I Been Pwned. Read more: cybernews.com/security/billi…
New breach: Samsung Germany had 216k unique email addresses exposed due to a compromise of their logistics provider, Spectos. Data included name, physical address, purchases and shipping tracking numbers. 49% were already in Have I Been Pwned. Read more: infostealers.com/article/samsun…
New breach: Hungarian education office website TehetségKapu had almost 55k records breached in March. Data included email address, name and username. 32% were already in Have I Been Pwned. Read more: 444.hu/2025/03/27/55-…
New breach: OnRPG had 1M email addresses breached in 2016. Data also included IP address, username and salted MD5 password hash. 86% were already in Have I Been Pwned. Read more: cybernews.com/security/billi…
New breach: Fédération Francaise de Rugby had 282k email addresses breached in June 2023. Data also included name, DoB and phone number. 69% were already in Have I Been Pwned. Read more: lemonde.fr/sport/article/…
New sensitive breach: The 2nd wave of Operation Endgame to disrupt criminal ransomware infrastructure has resulted in 15.4M email addresses and 43.8M passwords being provided to HIBP by law enforcement agencies. 83% were already in Have I Been Pwned. More: europol.europa.eu/media-press/ne…
New breach: French ISP "Free" was breached in Oct and the data later published publicly. It contains 14M email addresses along with name, physical address, gender, DoB, phone and for many records, IBAN. 59% were already in Have I Been Pwned. Read more: bleepingcomputer.com/news/security/…
New breach: ColoCrossing had 7k email addresses breached from their ColoCloud cloud/VPS service last month. Data also included name and MD5-Crypt password hash. 38% were already in Have I Been Pwned. Read more: lowendbox.com/blog/colocloud…
New breach: Japanese record chain store Disk Union had 690k email addresses breached in June 2022. Data included name, post code, phone and plain text password. 40% were already in Have I Been Pwned. Read more: news.kaduu.io/blog/2022/07/0…
New breach: Now defunct social media influencer platform WiredBucks was breached in 2022. Over 900k email and IP addresses, names, usernames and plain text passwords were exposed. 32% were already in Have I Been Pwned. Read more: cybernews.com/security/billi…
New breach: South American mobility services platform Ualabee had 472k records scraped last month. Data included email address, name, DoB, phone number and profile photo. 52% were already in Have I Been Pwned. Read more: news.ualabee.com/Aclaraci-n-sob…
New breach: Have Fun Teaching had 80k transactions with 27k unique email addresses breached in Aug 2021. Data also included physical and IP address, name, payment method and item purchased. 83% were already in Have I Been Pwned haveibeenpwned.com
New breach: In June last year, Robinsons Malls in the Philippines had 195k unique email addresses breached via their mobile app. Data also included name, DoB, gender, phone and city. 43% were already in Have I Been Pwned. Read more: rappler.com/technology/nat…
New sensitive breach: Last month, spyware app Catwatchful had 62k records breached via a SQL injection vulnerability that exposed email addresses and plain text passwords. 30% were already in Have I Been Pwned. Read more: techcrunch.com/2025/07/02/dat…