New breach: Cultura had 1.5M unique email addresses breached in September last year. Data also included name, phone number, physical address and orders. 78% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/Breach/Cultura

New breach: French telco Bouygues Telecom had 5.7M unique email addresses breached last month. Data also included name, physical address, phone number and IBAN. 57% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Bouyg...

In October 2021, now defunct Arabic language Anime website Animeify suffered a data breach that exposed 808k email addresses. Data also included name, username, gender and plain text password. 37% were already in @haveibeenpwned. Read more: haveibeenpwned.com/breach/Anime...

New sensitive breach: Adult website FreeOnes had 960k email addresses breached from their forum in 2017. Data also included username, IP addresses and salted MD5 password hash. 83% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/FreeO...

New breach: Swedish system supplier Miljödata was the victim of a ransomware attack last month. Impacted data included 870k email addresses along with names, physical addresses, DoBs and gov IDs. 11% were already in @haveibeenpwned. Read more: haveibeenpwned.com/breach/Miljo...

New breach: 1M records were allegedly obtained from Italian fashion designer Giglio. Data included email & physical address, name & phone number. Giglio did not respond to repeated attempts to report the breach. 60% were already in @haveibeenpwned. More: haveibeenpwned.com/breach/Giglio

New breach: 107k customer records were allegedly obtained from TheSqua[.]re in June. Data included email, city, name and phone number. TheSqua[.]re did not respond to repeated attempts to report the breach. 65% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/breach/TheSq...

New breach: Allianz Life had 1.1M unique email addresses breached last month via a social engineering attack. Data included name, phone number, physical address, DoB and gender. 72% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Allia...

New stealer logs: In June, news broke of a "16 billion password" breach, though the data turned out to be mostly previously seen stealer logs. 109M unique email addresses have been loaded as "Data Troll", with 96% already in @haveibeenpwned.com. More: haveibeenpwned.com/breach/DataT...

New breach: Unigame (maker of Hunter Online) had 844k records breached in 2019. Impacted data included email addresses and salted MD5 password hashes. 69% were already in @haveibeenpwned.bsky.social. Read more: cybernews.com/security/bil...

New breach: A vulnerability in the GiveWP WordPress plugin exposed the names and email addresses of 30k donors to the Pi-hole network-wide ad blocking project this week. 73% were already in @haveibeenpwned.com. Read more: pi-hole.net/blog/2025/07...

New breach: 160k customer records were allegedly obtained from Creams Cafe in May. Data included email and physical address, name and phone number. Creams Cafe did not respond to repeated attempts to report the breach. 76% were already in @haveibeenpwned.com haveibeenpwned.com

New breach: Thai-language fiction and comics MaReads had 74k records breached last month. Data included email address, username, phone number and DoB. 49% were already in @haveibeenpwned.com haveibeenpwned.com

New breach: Indian CME platform Omnicuris had 200k records breached last month. Data included name, email address, phone number, geolocation and data relating to professional expertise and training progress. 51% were already in @haveibeenpwned.com haveibeenpwned.com

New sensitive breach: Last month, spyware app Catwatchful had 62k records breached via a SQL injection vulnerability that exposed email addresses and plain text passwords. 30% were already in @haveibeenpwned.com. Read more: techcrunch.com/2025/07/02/d...

New breach: In June last year, Robinsons Malls in the Philippines had 195k unique email addresses breached via their mobile app. Data also included name, DoB, gender, phone and city. 43% were already in @haveibeenpwned.com. Read more: www.rappler.com/technology/n...

New breach: Have Fun Teaching had 80k transactions with 27k unique email addresses breached in Aug 2021. Data also included physical and IP address, name, payment method and item purchased. 83% were already in @haveibeenpwned.com haveibeenpwned.com

New breach: South American mobility services platform Ualabee had 472k records scraped last month. Data included email address, name, DoB, phone number and profile photo. 52% were already in @haveibeenpwned.com. Read more: news.ualabee.com/Aclaraci-n-s...

New breach: Now defunct social media influencer platform WiredBucks was breached in 2022. Over 900k email and IP addresses, names, usernames and plain text passwords were exposed. 32% were already in @haveibeenpwned.com. Read more: cybernews.com/security/bil...

New breach: Japanese record chain store Disk Union had 690k email addresses breached in June 2022. Data included name, post code, phone and plain text password. 40% were already in @haveibeenpwned.com. Read more: news.kaduu.io/blog/2022/07...

New breach: ColoCrossing had 7k email addresses breached from their ColoCloud cloud/VPS service last month. Data also included name and MD5-Crypt password hash. 38% were already in @haveibeenpwned.com . Read more: lowendbox.com/blog/coloclo...

New breach: French ISP "Free" was breached in Oct and the data later published publicly. It contains 14M email addresses along with name, physical address, gender, DoB, phone and for many records, IBAN. 59% were already in @haveibeenpwned.com. Read more: www.bleepingcomputer.com/news/securit...

New sensitive breach: The 2nd wave of Operation Endgame to disrupt criminal ransomware infrastructure has resulted in 15.4M email addresses and 43.8M passwords being provided to HIBP by law enforcement agencies. 83% were already in @haveibeenpwned.com. More: www.europol.europa.eu/media-press/...

New breach: Fédération Francaise de Rugby had 282k email addresses breached in June 2023. Data also included name, DoB and phone number. 69% were already in @haveibeenpwned.com. Read more: www.lemonde.fr/sport/articl...

New breach: OnRPG had 1M email addresses breached in 2016. Data also included IP address, username and salted MD5 password hash. 86% were already in @haveibeenpwned.com. Read more: cybernews.com/security/bil...

New breach: Hungarian education office website TehetségKapu had almost 55k records breached in March. Data included email address, name and username. 32% were already in @haveibeenpwned.com. Read more: 444.hu/2025/03/27/5...

New breach: Samsung Germany had 216k unique email addresses exposed due to a compromise of their logistics provider, Spectos. Data included name, physical address, purchases and shipping tracking numbers. 49% were already in @haveibeenpwned.com. Read more: www.infostealers.com/article/sams...

New breach: Indonesian restaurant website Qraved had almost 1M email addresses breached in 2021. Data also included name, phone, DoB and MD5 password hash. 83% were already in @haveibeenpwned.com. Read more: cybernews.com/security/bil...

New breach: French electronics retailer Boulanger had 967k email addresses breached in September. Data also included name, physical address, phone number and lat and long. 65% were already in @haveibeenpwned.com. Read more: therecord.media/france-retai...

New breach: German Doner Kebab had 162k unique email addresses publicly posted to a hacking forum last week. Data also included name, phone and physical addrress. 74% were already in @haveibeenpwned.com. Read more: x.com/DarkWebInfor...

New breach: Troy Hunt's Mailchimp account was successfully phished and a subscriber list for his personal blog was exported. Data included 16k email and IP addresses, plus derived lat long and time zone. 75% were already in @haveibeenpwned.com. Read more: www.troyhunt.com/a-sneaky-phi...

New sensitive breach: Spyware maker SpyX had almost 2M email addresses breached in June. The data also included IP address, country and what appears to be plain text iCloud credentials. 40% were already in @haveibeenpwned.com. Read more: techcrunch.com/2025/03/19/d...

New sensitive breach: Lexipol had 672k email addresses breached last month by self-proclaimed "Puppygirl Hacker Polycule". Data included name, phone and MD5 or SHA-256 password hashes. 23% were already in @haveibeenpwned.com. Read more: www.them.us/story/puppyg...

New sensitive breach: Color Dating had 220k unique email addresses breached in 2018. Data also included name, bio, photo and bcrypt password hash. 59% were already in @haveibeenpwned.com. Read more: cybernews.com/security/bil...

New breach: The flat earth sun, moon & zodiac app by "Flat Earth Dave" had 33k unique email addresses breached in Oct. Data included plain text passwords and users' lat and long (their position on the globe). 73% were already in @haveibeenpwned.com. More: www.youtube.com/watch?v=71FR...

New sensitive breach: Spyware service Spyzie had almost 519k email addresses breached this month. The exploited vulnerability also granted access to captured messages, photos, call logs, and more. 48% were already in @haveibeenpwned.com. Read more: techcrunch.com/2025/02/27/s...

New breach: Orange Romania had hundreds of thousands of email addresses breached and published this week. Data included phone number, subscription details and partial credit cards. 17% were already in @haveibeenpwned.com. Read more: www.bleepingcomputer.com/news/securit...

New stealer logs: 23B rows of "ALIEN TXTBASE" logs with 284M unique email addresses have been added to HIBP. New APIs can now search these by email domain and the domain of the website they were captured on. 69% were already in @haveibeenpwned.com . Read more: www.troyhunt.com/processing-2...

New sensitive breach: Spyware service Spyic had almost 876k email addresses breached this month. The exploited vulnerability also granted access to captured messages, photos, call logs, and more. 46% were already in @haveibeenpwned.com. Read more: techcrunch.com/2025/02/20/s...

New sensitive breach: Spyware service Cocospy had almost 1.8M email addresses breached this month. The exploited vulnerability also granted access to captured messages, photos, call logs, and more. 50% were already in @haveibeenpwned.com. Read more: techcrunch.com/2025/02/20/s...

New breach: Storenvy was breached in 2019. 1.8M rows with cracked password hashes were posted publicly. The source breach included 23M rows with 11M unique email addresses & salted SHA-1 hashes, among other data. 54% were already in @haveibeenpwned.com. More: hackread.com/e-commerce-f...

New sensitive breach: Yesterday, Doxbin was breached by "TOoDA" and 136k email addresses and associated usernames were publicly leaked. 46% were already in @haveibeenpwned.com. Read more: x.com/vxundergroun...

New breach: Zacks allegedly had 12M email addresses breached last year in a separate incident to their 2022 breach. Date included name, IP and physical address, phone and unsalted SHA-256 password hash. 93% were already in @haveibeenpwned.com. Read more: darkwebinformer.com/a-threat-act...

New breach: GPS tracking service LandAirSea had 337k customer records breached last month. Data included name, email, partial credit card data and tracking device information. 75% were already in @haveibeenpwned.com haveibeenpwned.com

New breach: Adopt Me Trading Values had 86k records breached in 2022. Data included email address, username (and Roblox username), IP address and bcrypt password hash. 27% were already in @haveibeenpwned.com. Read more: cybernews.com/security/bil...

New breach: Indonesian career platform Youthmanual had 938k email addresses breached in 2019. Data included name, date and place of birth, gender, phone number, physical address and salted SHA-1 password hash. 79% were already in @haveibeenpwned.com. More: thehackernews.com/2019/03/data...

New breach: The Thermomix "Recipe World" forum had 3.1M records breached in the last week. Data included name, email, physical address, phone number, DoB and (usually cooking-related) bio. 62% were already in @haveibeenpwned.com. Read more: www.presseportal.de/pm/52621/596...

New breach: Japanese solder business Hakko had almost 10k records breached in 2019. Data included email and physical address, phone, name, gender, DoB and plain text password. 92% were already in @haveibeenpwned.com. Read more: upfsecurity.co.jp/pmark/8395/

New breach: South Korean education platform PoinCampus had 89k email addresses breached in November. Data also included name and a small number of phone numbers and DoBs. 34% were already in @haveibeenpwned.com. Read more: darkwebinformer.com/888-has-alle...

New breach: Betting site 1win had 96M records breached in November. Data included email and IP address, phone number, DoB, country and SHA-256 password hash. 17% were already in @haveibeenpwned.com. Read more: cryptoadventure.com/1win-hack-le...