New scrape: Instagram allegedly had 17M rows of largely public data scraped from an API and posted to a hacking forum this week. 6.2M rows also included an email address, and some rows a phone number. 100% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Insta...

New breach: A reincarnation of BreachForums was breached in Aug before being taken down by law enforcement agencies in Oct. Data included 672k unique email addresses across user, post and private message tables. 53% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Breac...

New sensitive breach: Europid dating service WhiteDate had 6k unique emails breached last month, among extensive other personal data including physical attributes and IQ level. 59% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/White...

New breach: WIRED magazine had 2.3M records allegedly breached from parent company Condé Nast and published online this week. Data included email and display name, some records contained additional personal data. 81% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/WIRED

New breach: Russian airline Utair had 400k customer email addresses breached in 2019 and discovered the following year. Data also included name, physical address, DoB and passport number. 79% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Utair

New sensitive breach: Russian pharmaceutical company Gemotest had 31M records with 6.3M unique email addresses breached in 2022. Data included name, DoB, physical address, passport and insurance numbers. 70% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Gemot...

New breach: French vehicle inspection company AUTOSUR had 10M records with 487k unique email addresses breached in March. Data also included name, address, phone and vehicle details. 78% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/AUTOSUR

New breach: Now defunct forum for making money with botting "The Botting Network" was breached in 2012, exposing 96k records. Data included email address, username, DoB and salted MD5 password hashes. 97% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/TheBo...

New breach: In July 2016, the Web Hosting Talk vBulletin forum had 515k records breached. Data included email and IP address, username and salted Md5 password hash. 85% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/WebHo...

New breach: Russian streaming service KinoKong had over 800k records breached in March 2021. Data included email, name, username, IP address and MD5 password hash. 64% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/KinoK...

New breach: The Nissan 240SX Silvia and Z Fairlady car forum Zilvia[.]net had 288k records breached and leaked in Nov. Data included email and IP address, username and salted MD5 password hash. 81% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Zilvia

New breach: The China Software Developer Network (CSDN) had 6.4M records breached in 2011. Data included email address, username and plain text password. 80% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/CSDN

New breach: Online coding practice tool CodeStepByStep had 17k records breached last week. Data included name, username and email address. 61% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/Breach/CodeS...

New breach: In March, 1.8M records allegedly obtained from the ADDA housing societies service was posted to a public hacking forum. Data included email, name, phone and MD5 password hash. 67% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/ADDA

New breach: The International Kiteboarding Organization had 340k records breached this month. Data included email address, name, username and geolocation. 70% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/Breach/IKO

New breach: Beckett Collectibles experienced a breach and website content defacement this month. A portion of the data leaked publicly, including more than 500k alleged North American email addresses. 84% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Beckett

New breach: Eurofiber France had 10k unique email addresses breached last week in an attack on its ticket management platform. Some records also included name and phone number. 33% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Eurof...

New breach: Vultr had 188k email addresses breached via a security incident at a third-party in 2022. Some records also contained name, IP and country. 44% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Vultr

New breach: The 3rd wave of Operation Endgame targeting infostealer Rhadamanthys, Remote Access Trojan VenomRAT, and botnet Elysium resulted in authorities providing 2M email addresses and 7.4M passwords to HIBP. 34% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Opera...

New sensitive breach: Hungarian political party TISZA suffered a breach of its TISZA Világ platform last month, exposing 200k records, later published online. Data included email, name, phone & physical address. 41% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Tisza

New credential stuffing data: Synthient aggregated billions of threat data records from social media, forums, Tor and Telegram. Data included 2B unique email addresses and 1.3B unique passwords. 76% of emails were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Synth...

New breach: Last week, MyVidster had almost 4M user records posted to a public hacking forum. Data included email address, username and in some cases, profile photo. 38% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/breach/MyVid...

New stealer logs: Synthient aggregated billions of threat data records from social media, forums, Tor and Telegram. The stealer log data alone included 183M unique email addresses. 91% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Synth...

New breach: Prosper had 17.6M unique email addresses breached in an incident they detected and disclosed last month. Data included other customer info including SSN. Customer accounts and funds were not impacted. 84% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Prosper

New sensitive breach: Sexual healthcare product maker Hello Cake had 23k unique email addresses breached in July. Data also included name, phone number, physical address, DoB and purchases. 83% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Hello...

New breach: Today, Scattered LAPSUS$ Hunters published the breach of Vietnam Airlines from June this year. Data included 7.3M unique email addresses along with name, phone, DoB and loyalty membership number. 39% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Vietn...

New breach: Data allegedly obtained from Adpost surfaced in February this year. The data contained 3.3M records of email address, username and display name. 70% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/Breach/Adpost

New breach: Artists&Clients was breached in August and ransomed for US$50k. The data was then dumped last month and included 95k email addresses, usernames, IP addresses and bcrypt password hashes. 70% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/breach/Artis...

New breach: Now defunct Brazilian e-commerce platform HomeRefill was breached in 2020. Data included 187k unique email address, name, phone number, DoB and salted password hashes. 87% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/breach/HomeR...

New breach: Latest Pilot Jobs had 119k records breached in 2022. Data included email address, username, name and unsalted MD5 password hashes. 81% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/breach/Lates...

New breach: Cultura had 1.5M unique email addresses breached in September last year. Data also included name, phone number, physical address and orders. 78% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/Breach/Cultura

New breach: French telco Bouygues Telecom had 5.7M unique email addresses breached last month. Data also included name, physical address, phone number and IBAN. 57% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Bouyg...

In October 2021, now defunct Arabic language Anime website Animeify suffered a data breach that exposed 808k email addresses. Data also included name, username, gender and plain text password. 37% were already in @haveibeenpwned. Read more: haveibeenpwned.com/breach/Anime...

New sensitive breach: Adult website FreeOnes had 960k email addresses breached from their forum in 2017. Data also included username, IP addresses and salted MD5 password hash. 83% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/FreeO...

New breach: Swedish system supplier Miljödata was the victim of a ransomware attack last month. Impacted data included 870k email addresses along with names, physical addresses, DoBs and gov IDs. 11% were already in @haveibeenpwned. Read more: haveibeenpwned.com/breach/Miljo...

New breach: 1M records were allegedly obtained from Italian fashion designer Giglio. Data included email & physical address, name & phone number. Giglio did not respond to repeated attempts to report the breach. 60% were already in @haveibeenpwned. More: haveibeenpwned.com/breach/Giglio

New breach: 107k customer records were allegedly obtained from TheSqua[.]re in June. Data included email, city, name and phone number. TheSqua[.]re did not respond to repeated attempts to report the breach. 65% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/breach/TheSq...

New breach: Allianz Life had 1.1M unique email addresses breached last month via a social engineering attack. Data included name, phone number, physical address, DoB and gender. 72% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Allia...

New stealer logs: In June, news broke of a "16 billion password" breach, though the data turned out to be mostly previously seen stealer logs. 109M unique email addresses have been loaded as "Data Troll", with 96% already in @haveibeenpwned.com. More: haveibeenpwned.com/breach/DataT...

New breach: Unigame (maker of Hunter Online) had 844k records breached in 2019. Impacted data included email addresses and salted MD5 password hashes. 69% were already in @haveibeenpwned.bsky.social. Read more: cybernews.com/security/bil...

New breach: A vulnerability in the GiveWP WordPress plugin exposed the names and email addresses of 30k donors to the Pi-hole network-wide ad blocking project this week. 73% were already in @haveibeenpwned.com. Read more: pi-hole.net/blog/2025/07...

New breach: 160k customer records were allegedly obtained from Creams Cafe in May. Data included email and physical address, name and phone number. Creams Cafe did not respond to repeated attempts to report the breach. 76% were already in @haveibeenpwned.com haveibeenpwned.com

New breach: Thai-language fiction and comics MaReads had 74k records breached last month. Data included email address, username, phone number and DoB. 49% were already in @haveibeenpwned.com haveibeenpwned.com

New breach: Indian CME platform Omnicuris had 200k records breached last month. Data included name, email address, phone number, geolocation and data relating to professional expertise and training progress. 51% were already in @haveibeenpwned.com haveibeenpwned.com

New sensitive breach: Last month, spyware app Catwatchful had 62k records breached via a SQL injection vulnerability that exposed email addresses and plain text passwords. 30% were already in @haveibeenpwned.com. Read more: techcrunch.com/2025/07/02/d...

New breach: In June last year, Robinsons Malls in the Philippines had 195k unique email addresses breached via their mobile app. Data also included name, DoB, gender, phone and city. 43% were already in @haveibeenpwned.com. Read more: www.rappler.com/technology/n...

New breach: Have Fun Teaching had 80k transactions with 27k unique email addresses breached in Aug 2021. Data also included physical and IP address, name, payment method and item purchased. 83% were already in @haveibeenpwned.com haveibeenpwned.com

New breach: South American mobility services platform Ualabee had 472k records scraped last month. Data included email address, name, DoB, phone number and profile photo. 52% were already in @haveibeenpwned.com. Read more: news.ualabee.com/Aclaraci-n-s...

New breach: Now defunct social media influencer platform WiredBucks was breached in 2022. Over 900k email and IP addresses, names, usernames and plain text passwords were exposed. 32% were already in @haveibeenpwned.com. Read more: cybernews.com/security/bil...

New breach: Japanese record chain store Disk Union had 690k email addresses breached in June 2022. Data included name, post code, phone and plain text password. 40% were already in @haveibeenpwned.com. Read more: news.kaduu.io/blog/2022/07...