├── .gitignore
├── src
    ├── _data
    │   └── hibp.js
    └── pages
    │   └── hibp.njk
├── www
    └── hibp
    │   ├── seedpeer
    │       └── index.html
    │   ├── sumotorrent
    │       └── index.html
    │   ├── interpals
    │       └── index.html
    │   ├── nihonomaru
    │       └── index.html
    │   ├── mpgh
    │       └── index.html
    │   ├── onverse
    │       └── index.html
    │   ├── ovh
    │       └── index.html
    │   ├── wiiuiso
    │       └── index.html
    │   ├── mac-torrents
    │       └── index.html
    │   ├── minecraftworldmap
    │       └── index.html
    │   ├── warinc
    │       └── index.html
    │   ├── teracod
    │       └── index.html
    │   ├── pspiso
    │       └── index.html
    │   ├── thefappening
    │       └── index.html
    │   ├── uiggy
    │       └── index.html
    │   ├── acneorg
    │       └── index.html
    │   ├── botoflegends
    │       └── index.html
    │   ├── crackingforum
    │       └── index.html
    │   ├── funimation
    │       └── index.html
    │   ├── modaco
    │       └── index.html
    │   ├── youku
    │       └── index.html
    │   ├── avast
    │       └── index.html
    │   ├── majorgeeks
    │       └── index.html
    │   ├── 2fast4u
    │       └── index.html
    │   ├── agusiqtorrents
    │       └── index.html
    │   ├── demonforums
    │       └── index.html
    │   ├── hongfire
    │       └── index.html
    │   ├── mangafox
    │       └── index.html
    │   ├── xbox360iso
    │       └── index.html
    │   ├── cafemom
    │       └── index.html
    │   ├── xat
    │       └── index.html
    │   ├── btce
    │       └── index.html
    │   ├── d3scene
    │       └── index.html
    │   ├── ffshrine
    │       └── index.html
    │   ├── nulled
    │       └── index.html
    │   ├── autocentrum
    │       └── index.html
    │   ├── heroesofgaia
    │       └── index.html
    │   ├── kimsufi
    │       └── index.html
    │   ├── abandonia
    │       └── index.html
    │   ├── cheapassgamer
    │       └── index.html
    │   ├── gtagaming
    │       └── index.html
    │   ├── hltv
    │       └── index.html
    │   ├── xbox-scene
    │       └── index.html
    │   ├── xsplit
    │       └── index.html
    │   ├── armyforceonline
    │       └── index.html
    │   ├── wildstar
    │       └── index.html
    │   ├── bombujeu
    │       └── index.html
    │   ├── lotr
    │       └── index.html
    │   ├── ps3hax
    │       └── index.html
    │   ├── psx-scene
    │       └── index.html
    │   ├── bannerbit
    │       └── index.html
    │   ├── ddo
    │       └── index.html
    │   ├── ilikecheats
    │       └── index.html
    │   ├── loungeboard
    │       └── index.html
    │   ├── svenskamagic
    │       └── index.html
    │   ├── tianya
    │       └── index.html
    │   ├── youporn
    │       └── index.html
    │   ├── boxee
    │       └── index.html
    │   ├── crackcommunity
    │       └── index.html
    │   ├── serverpact
    │       └── index.html
    │   ├── sktorrent
    │       └── index.html
    │   ├── thetvdb
    │       └── index.html
    │   ├── aternos
    │       └── index.html
    │   ├── flashflashrevolution
    │       └── index.html
    │   ├── gamigo
    │       └── index.html
    │   ├── kickstarter
    │       └── index.html
    │   ├── ancestry
    │       └── index.html
    │   ├── blackhatworld
    │       └── index.html
    │   ├── dailymotion
    │       └── index.html
    │   ├── lookbook
    │       └── index.html
    │   ├── minefield
    │       └── index.html
    │   ├── pokebip
    │       └── index.html
    │   ├── solomid
    │       └── index.html
    │   ├── gamerzplanet
    │       └── index.html
    │   ├── bitly
    │       └── index.html
    │   ├── evony
    │       └── index.html
    │   ├── morelenet
    │       └── index.html
    │   ├── myvidster
    │       └── index.html
    │   ├── ownedcore
    │       └── index.html
    │   ├── pokemonnegro
    │       └── index.html
    │   ├── mappery
    │       └── index.html
    │   ├── plex
    │       └── index.html
    │   ├── wpt
    │       └── index.html
    │   ├── xkcd
    │       └── index.html
    │   ├── dangdang
    │       └── index.html
    │   ├── emuparadise
    │       └── index.html
    │   ├── patreon
    │       └── index.html
    │   ├── torrentinvites
    │       └── index.html
    │   ├── shotbow
    │       └── index.html
    │   ├── hemmelig
    │       └── index.html
    │   ├── phpfreaks
    │       └── index.html
    │   ├── trillian
    │       └── index.html
    │   ├── muslimmatch
    │       └── index.html
    │   ├── planetcalypso
    │       └── index.html
    │   ├── ahashare
    │       └── index.html
    │   ├── bittorrent
    │       └── index.html
    │   ├── epicnpc
    │       └── index.html
    │   ├── tumblr
    │       └── index.html
    │   ├── whmcs
    │       └── index.html
    │   ├── atlasquantum
    │       └── index.html
    │   ├── forumcommunity
    │       └── index.html
    │   ├── sweclockers
    │       └── index.html
    │   ├── androidforums
    │       └── index.html
    │   ├── minehut
    │       └── index.html
    │   ├── vianet
    │       └── index.html
    │   ├── mathway
    │       └── index.html
    │   ├── unicocampania
    │       └── index.html
    │   ├── epicgames
    │       └── index.html
    │   ├── kiwifarms
    │       └── index.html
    │   ├── linuxmint
    │       └── index.html
    │   ├── malwarebytes
    │       └── index.html
    │   ├── qip
    │       └── index.html
    │   ├── reincubate
    │       └── index.html
    │   ├── starnet
    │       └── index.html
    │   ├── cannabisforum
    │       └── index.html
    │   ├── devkitpro
    │       └── index.html
    │   ├── htcmania
    │       └── index.html
    │   ├── hub4tech
    │       └── index.html
    │   ├── utorrent
    │       └── index.html
    │   ├── elance
    │       └── index.html
    │   ├── everybodyedits
    │       └── index.html
    │   ├── glofox
    │       └── index.html
    │   ├── linuxforums
    │       └── index.html
    │   ├── neteller
    │       └── index.html
    │   ├── nonnudegirls
    │       └── index.html
    │   ├── underworldempire
    │       └── index.html
    │   ├── unrealengine
    │       └── index.html
    │   ├── verified
    │       └── index.html
    │   ├── crackedto
    │       └── index.html
    │   ├── imesh
    │       └── index.html
    │   ├── peatix
    │       └── index.html
    │   ├── animegame
    │       └── index.html
    │   ├── cdprojektred
    │       └── index.html
    │   ├── comcast
    │       └── index.html
    │   ├── faceup
    │       └── index.html
    │   ├── napsgear
    │       └── index.html
    │   ├── nextgenupdate
    │       └── index.html
    │   ├── voidto
    │       └── index.html
    │   ├── artvalue
    │       └── index.html
    │   ├── babynames
    │       └── index.html
    │   ├── beautifulpeople
    │       └── index.html
    │   ├── dafont
    │       └── index.html
    │   ├── dvdshopch
    │       └── index.html
    │   ├── gametuts
    │       └── index.html
    │   ├── gpsunderground
    │       └── index.html
    │   ├── r2-2017
    │       └── index.html
    │   ├── russianamerica
    │       └── index.html
    │   ├── slickwraps
    │       └── index.html
    │   ├── tamodo
    │       └── index.html
    │   ├── vk
    │       └── index.html
    │   ├── win7vista
    │       └── index.html
    │   ├── wizishop
    │       └── index.html
    │   ├── xhamster
    │       └── index.html
    │   ├── 000webhost
    │       └── index.html
    │   ├── fashionfantasygame
    │       └── index.html
    │   ├── furaffinity
    │       └── index.html
    │   ├── r2games
    │       └── index.html
    │   ├── viewfines
    │       └── index.html
    │   ├── 17media
    │       └── index.html
    │   ├── cafepress
    │       └── index.html
    │   ├── creative
    │       └── index.html
    │   ├── payasugym
    │       └── index.html
    │   ├── chowbus
    │       └── index.html
    │   ├── nulledch
    │       └── index.html
    │   ├── adultfriendfinder
    │       └── index.html
    │   ├── appartoo
    │       └── index.html
    │   ├── facepunch
    │       └── index.html
    │   ├── gogames
    │       └── index.html
    │   ├── indianrailways
    │       └── index.html
    │   ├── lightshope
    │       └── index.html
    │   ├── pixelfederation
    │       └── index.html
    │   ├── smogon
    │       └── index.html
    │   ├── victoryphones
    │       └── index.html
    │   ├── aptoide
    │       └── index.html
    │   ├── littlemonsters
    │       └── index.html
    │   ├── moneybookers
    │       └── index.html
    │   ├── soundwave
    │       └── index.html
    │   ├── thecandidboard
    │       └── index.html
    │   ├── warmane
    │       └── index.html
    │   ├── aerserv
    │       └── index.html
    │   ├── parapa
    │       └── index.html
    │   ├── reverb-nation
    │       └── index.html
    │   ├── ulmon
    │       └── index.html
    │   ├── weheartit
    │       └── index.html
    │   ├── businessacumen
    │       └── index.html
    │   ├── daniweb
    │       └── index.html
    │   ├── hthstudios
    │       └── index.html
    │   ├── mindjolt
    │       └── index.html
    │   ├── quidd
    │       └── index.html
    │   ├── vodafone
    │       └── index.html
    │   ├── ipmart
    │       └── index.html
    │   ├── mcbans
    │       └── index.html
    │   ├── rbxrocks
    │       └── index.html
    │   ├── snail
    │       └── index.html
    │   ├── blackspigotmc
    │       └── index.html
    │   ├── freshmenu
    │       └── index.html
    │   ├── jobandtalent
    │       └── index.html
    │   ├── mrexcel
    │       └── index.html
    │   ├── nexusmods
    │       └── index.html
    │   ├── poshmark
    │       └── index.html
    │   ├── quantumbooter
    │       └── index.html
    │   ├── vins
    │       └── index.html
    │   ├── chegg
    │       └── index.html
    │   ├── crossfire
    │       └── index.html
    │   ├── petflow
    │       └── index.html
    │   ├── animeplanet
    │       └── index.html
    │   ├── biohackme
    │       └── index.html
    │   ├── lanwar
    │       └── index.html
    │   ├── playgar
    │       └── index.html
    │   ├── vbulletin
    │       └── index.html
    │   ├── wienerbuchereien
    │       └── index.html
    │   ├── animoto
    │       └── index.html
    │   ├── forbes
    │       └── index.html
    │   ├── lizardsquad
    │       └── index.html
    │   ├── thishabboforum
    │       └── index.html
    │   ├── yatra
    │       └── index.html
    │   ├── zynga
    │       └── index.html
    │   ├── bolt
    │       └── index.html
    │   ├── cashcrate
    │       └── index.html
    │   ├── gaadi
    │       └── index.html
    │   ├── rosebuttboard
    │       └── index.html
    │   ├── socialengineered
    │       └── index.html
    │   ├── artsy
    │       └── index.html
    │   ├── battlefieldheroes
    │       └── index.html
    │   ├── funnygames
    │       └── index.html
    │   ├── lifeboat
    │       └── index.html
    │   ├── powerbot
    │       └── index.html
    │   ├── roll20
    │       └── index.html
    │   ├── eyeem
    │       └── index.html
    │   ├── heroesofnewerth
    │       └── index.html
    │   ├── mate1
    │       └── index.html
    │   ├── toondoo
    │       └── index.html
    │   ├── bitcointalk
    │       └── index.html
    │   ├── fling
    │       └── index.html
    │   ├── foodora
    │       └── index.html
    │   ├── lazada
    │       └── index.html
    │   ├── linkedin
    │       └── index.html
    │   ├── macforums
    │       └── index.html
    │   ├── naughtyamerica
    │       └── index.html
    │   ├── nitro
    │       └── index.html
    │   ├── policeone
    │       └── index.html
    │   ├── truefire
    │       └── index.html
    │   ├── vedantu
    │       └── index.html
    │   ├── astropid
    │       └── index.html
    │   ├── b2busabusinesses
    │       └── index.html
    │   ├── clashofkings
    │       └── index.html
    │   ├── gamesalad
    │       └── index.html
    │   ├── canva
    │       └── index.html
    │   ├── tout
    │       └── index.html
    │   ├── truckersmp
    │       └── index.html
    │   ├── universarium
    │       └── index.html
    │   ├── experian2020
    │       └── index.html
    │   ├── foxybingo
    │       └── index.html
    │   ├── lifebear
    │       └── index.html
    │   ├── storybird
    │       └── index.html
    │   ├── wpsandbox
    │       └── index.html
    │   ├── 8fit
    │       └── index.html
    │   ├── brazzers
    │       └── index.html
    │   ├── europajobs
    │       └── index.html
    │   ├── minecraftpocketeditionforum
    │       └── index.html
    │   ├── mspy
    │       └── index.html
    │   ├── rambler
    │       └── index.html
    │   ├── siae
    │       └── index.html
    │   ├── coinmama
    │       └── index.html
    │   ├── insanelyi
    │       └── index.html
    │   ├── paddypower
    │       └── index.html
    │   ├── spirol
    │       └── index.html
    │   ├── stockx
    │       └── index.html
    │   ├── strongholdkingdoms
    │       └── index.html
    │   ├── yahoo
    │       └── index.html
    │   ├── edmodo
    │       └── index.html
    │   ├── lyricsmania
    │       └── index.html
    │   ├── programmingforums
    │       └── index.html
    │   ├── zomato
    │       └── index.html
    │   ├── armorgames
    │       └── index.html
    │   ├── clubpenguinrewrittenjul2019
    │       └── index.html
    │   ├── dunzo
    │       └── index.html
    │   ├── eatstreet
    │       └── index.html
    │   ├── epicbot
    │       └── index.html
    │   ├── ixigo
    │       └── index.html
    │   ├── muslimdirectory
    │       └── index.html
    │   ├── nemoweb
    │       └── index.html
    │   ├── nival
    │       └── index.html
    │   ├── tesco
    │       └── index.html
    │   ├── coachella
    │       └── index.html
    │   ├── dailyobjects
    │       └── index.html
    │   ├── hautelook
    │       └── index.html
    │   ├── hookersnl
    │       └── index.html
    │   ├── kmru
    │       └── index.html
    │   ├── pixlr
    │       └── index.html
    │   ├── promofarma
    │       └── index.html
    │   ├── tailieu
    │       └── index.html
    │   ├── tokopedia
    │       └── index.html
    │   ├── 123rf
    │       └── index.html
    │   ├── bukalapak
    │       └── index.html
    │   ├── evermotion
    │       └── index.html
    │   ├── netprospex
    │       └── index.html
    │   ├── ogusers2020
    │       └── index.html
    │   ├── staminus
    │       └── index.html
    │   └── streeteasy
    │       └── index.html
└── .eleventy.js


/.gitignore:
--------------------------------------------------------------------------------
1 | node_modules
2 | 


--------------------------------------------------------------------------------
/src/_data/hibp.js:
--------------------------------------------------------------------------------
1 | const axios = require("axios");
2 | 
3 | module.exports = async () => {
4 |   const res = await axios.get("https://haveibeenpwned.com/api/v3/breaches");
5 |   return res.data.sort(
6 |     (a, b) => Date.parse(b.AddedDate) - Date.parse(a.AddedDate)
7 |   );
8 | };
9 | 


--------------------------------------------------------------------------------
/www/hibp/seedpeer/index.html:
--------------------------------------------------------------------------------
1 | <h1 id="seedpeer">Seedpeer</h1>
2 | 
3 | <p><time datetime="2016-03-09T02:49:28Z">2016-03-09T02:49:28Z</time></p>
4 | <p>
5 |   In July 2015, the torrent site Seedpeer was hacked and 282k member records
6 |   were exposed. The data included usernames, email addresses and passwords
7 |   stored as weak MD5 hashes.
8 | </p>
9 | 


--------------------------------------------------------------------------------
/www/hibp/sumotorrent/index.html:
--------------------------------------------------------------------------------
1 | <h1 id="sumotorrent">Sumo Torrent</h1>
2 | 
3 | <p><time datetime="2016-03-09T01:23:23Z">2016-03-09T01:23:23Z</time></p>
4 | <p>
5 |   In June 2014, the torrent site Sumo Torrent was hacked and 285k member records
6 |   were exposed. The data included IP addresses, email addresses and passwords
7 |   stored as weak MD5 hashes.
8 | </p>
9 | 


--------------------------------------------------------------------------------
/www/hibp/interpals/index.html:
--------------------------------------------------------------------------------
1 | <h1 id="interpals">InterPals</h1>
2 | 
3 | <p><time datetime="2016-08-30T11:22:42Z">2016-08-30T11:22:42Z</time></p>
4 | <p>
5 |   In late 2015, the online penpal site InterPals had their website hacked and
6 |   3.4 million accounts exposed. The compromised data included email addresses,
7 |   geographical locations, birthdates and salted hashes of passwords.
8 | </p>
9 | 


--------------------------------------------------------------------------------
/www/hibp/nihonomaru/index.html:
--------------------------------------------------------------------------------
1 | <h1 id="nihonomaru">Nihonomaru</h1>
2 | 
3 | <p><time datetime="2016-08-30T09:54:55Z">2016-08-30T09:54:55Z</time></p>
4 | <p>
5 |   In late 2015, the anime community known as Nihonomaru had their vBulletin
6 |   forum hacked and 1.7 million accounts exposed. The compromised data included
7 |   email and IP addresses, usernames and salted hashes of passwords.
8 | </p>
9 | 


--------------------------------------------------------------------------------
/www/hibp/mpgh/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="mpgh">MPGH</h1>
 2 | 
 3 | <p><time datetime="2015-10-26T03:20:20Z">2015-10-26T03:20:20Z</time></p>
 4 | <p>
 5 |   In October 2015, the multiplayer game hacking website
 6 |   <a href="http://www.mpgh.net">MPGH was hacked</a> and 3.1 million user
 7 |   accounts disclosed. The vBulletin forum breach contained usernames, email
 8 |   addresses, IP addresses and salted hashes of passwords.
 9 | </p>
10 | 


--------------------------------------------------------------------------------
/www/hibp/onverse/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="onverse">Onverse</h1>
 2 | 
 3 | <p><time datetime="2016-09-06T06:28:30Z">2016-09-06T06:28:30Z</time></p>
 4 | <p>
 5 |   In January 2016, the online virtual world known as
 6 |   <a href="http://www.onverse.com" target="_blank" rel="noopener">Onverse</a>
 7 |   was hacked and 800k accounts were exposed. Along with email and IP addresses,
 8 |   the site also exposed salted MD5 password hashes.
 9 | </p>
10 | 


--------------------------------------------------------------------------------
/www/hibp/ovh/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="ovh">OVH</h1>
 2 | 
 3 | <p><time datetime="2016-12-27T07:49:12Z">2016-12-27T07:49:12Z</time></p>
 4 | <p>
 5 |   In mid-2015, the forum for the hosting provider known as
 6 |   <a href="https://www.ovh.com" target="_blank" rel="noopener">OVH</a> suffered
 7 |   a data breach. The vBulletin forum contained 453k accounts including
 8 |   usernames, email and IP addresses and passwords stored as salted MD5 hashes.
 9 | </p>
10 | 


--------------------------------------------------------------------------------
/www/hibp/wiiuiso/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="wiiuiso">WIIU ISO</h1>
 2 | 
 3 | <p><time datetime="2016-09-06T05:51:12Z">2016-09-06T05:51:12Z</time></p>
 4 | <p>
 5 |   In September 2015, the Nintendo Wii U forum known as
 6 |   <a href="http://www.wiiuiso.com" target="_blank" rel="noopener">WIIU ISO</a>
 7 |   was hacked and 458k accounts were exposed. Along with email and IP addresses,
 8 |   the vBulletin forum also exposed salted MD5 password hashes.
 9 | </p>
10 | 


--------------------------------------------------------------------------------
/www/hibp/mac-torrents/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="mac-torrents">Mac-Torrents</h1>
 2 | 
 3 | <p><time datetime="2015-10-31T23:54:26Z">2015-10-31T23:54:26Z</time></p>
 4 | <p>
 5 |   In October 2015, the torrent site
 6 |   <a href="http://www.mac-torrents.com" target="_blank" rel="noopener"
 7 |     >Mac-Torrents</a
 8 |   >
 9 |   was hacked and almost 94k usernames, email addresses and passwords were
10 |   leaked. The passwords were hashed with MD5 and no salt.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/minecraftworldmap/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="minecraftworldmap">Minecraft World Map</h1>
 2 | 
 3 | <p><time datetime="2016-08-29T01:07:38Z">2016-08-29T01:07:38Z</time></p>
 4 | <p>
 5 |   In approximately January 2016, the Minecraft World Map site designed for
 6 |   sharing maps created for the game was hacked and over 71k user accounts were
 7 |   exposed. The data included usernames, email and IP addresses along with salted
 8 |   and hashed passwords.
 9 | </p>
10 | 


--------------------------------------------------------------------------------
/www/hibp/warinc/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="warinc">War Inc.</h1>
 2 | 
 3 | <p><time datetime="2016-11-07T11:07:25Z">2016-11-07T11:07:25Z</time></p>
 4 | <p>
 5 |   In mid-2012, the real-time strategy game
 6 |   <a href="http://thewarinc.com" target="_blank" rel="noopener">War Inc.</a>
 7 |   suffered a data breach. The attack resulted in the exposure of over 1 million
 8 |   accounts including usernames, email addresses and salted MD5 hashes of
 9 |   passwords.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/teracod/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="teracod">Teracod</h1>
 2 | 
 3 | <p><time datetime="2016-08-22T11:21:27Z">2016-08-22T11:21:27Z</time></p>
 4 | <p>
 5 |   In May 2015, almost 100k user records were extracted from the Hungarian
 6 |   torrent site known as Teracod. The data was later discovered being torrented
 7 |   itself and included email addresses, passwords, private messages between
 8 |   members and the peering history of IP addresses using the service.
 9 | </p>
10 | 


--------------------------------------------------------------------------------
/www/hibp/pspiso/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="pspiso">PSP ISO</h1>
 2 | 
 3 | <p><time datetime="2017-01-29T07:28:23Z">2017-01-29T07:28:23Z</time></p>
 4 | <p>
 5 |   In approximately September 2015, the PlayStation PSP forum known as
 6 |   <a href="http://www.pspiso.com" target="_blank" rel="noopener">PSP ISO</a> was
 7 |   hacked and almost 1.3 million accounts were exposed. Along with email and IP
 8 |   addresses, the vBulletin forum also exposed salted MD5 password hashes.
 9 | </p>
10 | 


--------------------------------------------------------------------------------
/www/hibp/thefappening/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="thefappening">The Fappening</h1>
 2 | 
 3 | <p><time datetime="2016-04-13T01:08:20Z">2016-04-13T01:08:20Z</time></p>
 4 | <p>
 5 |   In December 2015, the forum for discussing naked celebrity photos known as
 6 |   &quot;The Fappening&quot; (named after the iCloud leaks of 2014) was
 7 |   compromised and 179k accounts were leaked. Exposed member data included
 8 |   usernames, email addresses and salted hashes of passwords.
 9 | </p>
10 | 


--------------------------------------------------------------------------------
/www/hibp/uiggy/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="uiggy">Uiggy</h1>
 2 | 
 3 | <p><time datetime="2016-06-27T08:07:18Z">2016-06-27T08:07:18Z</time></p>
 4 | <p>
 5 |   In June 2016, the Facebook application known as
 6 |   <a href="http://www.uiggy.com" target="_blank" rel="noopener">Uiggy</a> was
 7 |   hacked and 4.3M accounts were exposed, 2.7M of which had email addresses
 8 |   against them. The leaked accounts also exposed names, genders and the Facebook
 9 |   ID of the owners.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/acneorg/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="acneorg">Acne.org</h1>
 2 | 
 3 | <p><time datetime="2016-03-06T11:07:41Z">2016-03-06T11:07:41Z</time></p>
 4 | <p>
 5 |   In November 2014, the acne website
 6 |   <a href="http://www.acne.org/" target="_blank" rel="noopener">acne.org</a>
 7 |   suffered a data breach that exposed over 430k forum members' accounts. The
 8 |   data was being actively traded on underground forums and included email
 9 |   addresses, birth dates and passwords.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/botoflegends/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="botoflegends">Bot of Legends</h1>
 2 | 
 3 | <p><time datetime="2016-12-27T08:24:52Z">2016-12-27T08:24:52Z</time></p>
 4 | <p>
 5 |   In November 2014, the forum for
 6 |   <a href="http://botoflegends.com" target="_blank" rel="noopener"
 7 |     >Bot of Legends</a
 8 |   >
 9 |   suffered a data breach. The IP.Board forum contained 238k accounts including
10 |   usernames, email and IP addresses and passwords stored as salted MD5 hashes.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/crackingforum/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="crackingforum">CrackingForum</h1>
 2 | 
 3 | <p><time datetime="2017-12-10T20:08:30Z">2017-12-10T20:08:30Z</time></p>
 4 | <p>
 5 |   In approximately mid-2016, the cracking community forum known as
 6 |   <a href="http://crackingforum.com" target="_blank" rel="noopener"
 7 |     >CrackingForum</a
 8 |   >
 9 |   suffered a data breach. The vBulletin based forum exposed 660k email and IP
10 |   addresses, usernames and salted MD5 hashes.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/funimation/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="funimation">Funimation</h1>
 2 | 
 3 | <p><time datetime="2017-02-20T00:43:26Z">2017-02-20T00:43:26Z</time></p>
 4 | <p>
 5 |   In July 2016, the anime site
 6 |   <a href="https://www.funimation.com/" target="_blank" rel="noopener"
 7 |     >Funimation</a
 8 |   >
 9 |   suffered a data breach that impacted 2.5 million accounts. The data contained
10 |   usernames, email addresses, dates of birth and salted SHA1 hashes of
11 |   passwords.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/modaco/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="modaco">MoDaCo</h1>
 2 | 
 3 | <p><time datetime="2016-09-20T07:32:50Z">2016-09-20T07:32:50Z</time></p>
 4 | <p>
 5 |   In approximately January 2016, the UK based Android community known as
 6 |   <a href="http://www.modaco.com" target="_blank" rel="noopener">MoDaCo</a>
 7 |   suffered a data breach which exposed 880k subscriber identities. The data
 8 |   included email and IP addresses, usernames and passwords stored as salted MD5
 9 |   hashes.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/youku/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="youku">Youku</h1>
 2 | 
 3 | <p><time datetime="2017-04-15T11:02:35Z">2017-04-15T11:02:35Z</time></p>
 4 | <p>
 5 |   In late 2016, the online Chinese video service
 6 |   <a href="http://www.youku.com" target="_blank" rel="noopener">Youku</a>
 7 |   suffered a data breach. The incident exposed 92 million unique user accounts
 8 |   and corresponding MD5 password hashes. The data was contributed to Have I Been
 9 |   Pwned courtesy of rip@creep.im.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/avast/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="avast">Avast</h1>
 2 | 
 3 | <p><time datetime="2016-03-12T22:08:58Z">2016-03-12T22:08:58Z</time></p>
 4 | <p>
 5 |   In May 2014,
 6 |   <a
 7 |     href="https://www.grahamcluley.com/2014/05/avast-forum-hacked/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the Avast anti-virus forum was hacked</a
11 |   >
12 |   and 423k member records were exposed. The Simple Machines Based forum included
13 |   usernames, emails and password hashes.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/majorgeeks/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="majorgeeks">MajorGeeks</h1>
 2 | 
 3 | <p><time datetime="2016-03-03T02:45:09Z">2016-03-03T02:45:09Z</time></p>
 4 | <p>
 5 |   In November 2015, almost 270k accounts from the
 6 |   <a href="http://www.majorgeeks.com" target="_blank" rel="noopener"
 7 |     >MajorGeeks</a
 8 |   >
 9 |   support forum were breached. The accounts were being actively sold and traded
10 |   online and included email addresses, salted password hashes and IP addresses.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/.eleventy.js:
--------------------------------------------------------------------------------
 1 | const pluginRss = require("@11ty/eleventy-plugin-rss");
 2 | 
 3 | module.exports = (eleventyConfig) => {
 4 |   eleventyConfig.addPlugin(pluginRss);
 5 | 
 6 |   eleventyConfig.addFilter("inspect", require("util").inspect);
 7 |   eleventyConfig.addFilter("arrSlice", (arr=[], len=10) => arr.slice(0, len));
 8 |   eleventyConfig.addFilter("dateParse", str => new Date(str));
 9 | 
10 |   return {
11 |     dir: {
12 |       input: "src",
13 |       output: "www"
14 |     }
15 |   };
16 | };
17 | 


--------------------------------------------------------------------------------
/www/hibp/2fast4u/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="2fast4u">2fast4u</h1>
 2 | 
 3 | <p><time datetime="2018-01-07T08:19:39Z">2018-01-07T08:19:39Z</time></p>
 4 | <p>
 5 |   In December 2017, the Belgian motorcycle forum
 6 |   <a href="https://www.2fast4u.be" target="_blank" rel="noopener">2fast4u</a>
 7 |   discovered a data breach of their system. The breach of the vBulletin message
 8 |   board impacted over 17k individual users and exposed email addresses,
 9 |   usersnames and salted MD5 passwords.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/agusiqtorrents/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="agusiqtorrents">AgusiQ-Torrents.pl</h1>
 2 | 
 3 | <p><time datetime="2019-12-04T21:54:50Z">2019-12-04T21:54:50Z</time></p>
 4 | <p>
 5 |   In September 2019, Polish torrent site
 6 |   <a href="http://agusiq-torrents.pl/" target="_blank" rel="noopener"
 7 |     >AgusiQ-Torrents.pl</a
 8 |   >
 9 |   suffered a data breach. The incident exposed 90k member records including
10 |   email and IP addresses, usernames and passwords stored as MD5 hashes.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/demonforums/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="demonforums">Demon Forums</h1>
 2 | 
 3 | <p><time datetime="2019-04-04T07:14:34Z">2019-04-04T07:14:34Z</time></p>
 4 | <p>
 5 |   In February 2019, the hacking forum
 6 |   <a href="https://demonforums.net/" target="_blank" rel="noopener"
 7 |     >Demon Forums</a
 8 |   >
 9 |   suffered a data breach. The compromise of the vBulletin forum exposed 52k
10 |   unique email addresses alongside usernames and passwords stored as salted MD5
11 |   hashes.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/hongfire/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="hongfire">HongFire</h1>
 2 | 
 3 | <p><time datetime="2017-02-05T20:36:21Z">2017-02-05T20:36:21Z</time></p>
 4 | <p>
 5 |   In March 2015, the anime and manga forum
 6 |   <a href="http://www.hongfire.com" target="_blank" rel="noopener">HongFire</a>
 7 |   suffered a data breach. The hack of their vBulletin forum led to the exposure
 8 |   of 1 million accounts along with email and IP addresses, usernames, dates of
 9 |   birth and salted MD5 passwords.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/mangafox/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="mangafox">MangaFox.me</h1>
 2 | 
 3 | <p><time datetime="2018-03-17T01:43:24Z">2018-03-17T01:43:24Z</time></p>
 4 | <p>
 5 |   In approximately July 2016, the manga website known as
 6 |   <a href="http://mangafox.me" target="_blank" rel="noopener">mangafox.me</a>
 7 |   suffered a data breach. The vBulletin based forum exposed 1.3 million accounts
 8 |   including usernames, email and IP addresses, dates of birth and salted MD5
 9 |   password hashes.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/xbox360iso/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="xbox360iso">Xbox 360 ISO</h1>
 2 | 
 3 | <p><time datetime="2017-01-29T07:20:52Z">2017-01-29T07:20:52Z</time></p>
 4 | <p>
 5 |   In approximately September 2015, the XBOX 360 forum known as
 6 |   <a href="http://www.xbox360iso.com" target="_blank" rel="noopener"
 7 |     >XBOX360 ISO</a
 8 |   >
 9 |   was hacked and 1.2 million accounts were exposed. Along with email and IP
10 |   addresses, the vBulletin forum also exposed salted MD5 password hashes.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/cafemom/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="cafemom">CafeMom</h1>
 2 | 
 3 | <p><time datetime="2017-11-09T19:54:20Z">2017-11-09T19:54:20Z</time></p>
 4 | <p>
 5 |   In 2014, the social network for mothers
 6 |   <a href="http://www.cafemom.com" target="_blank" rel="noopener">CafeMom</a>
 7 |   suffered a data breach. The data surfaced alongside a number of other
 8 |   historical breaches including Kickstarter, Bitly and Disqus and contained 2.6
 9 |   million email addresses and plain text passwords.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/xat/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="xat">xat</h1>
 2 | 
 3 | <p><time datetime="2016-08-05T06:53:35Z">2016-08-05T06:53:35Z</time></p>
 4 | <p>
 5 |   In November 2015, the online chatroom known as
 6 |   <a href="http://xat.com/databreach.html" target="_blank" rel="noopener"
 7 |     >&quot;xat&quot; was hacked</a
 8 |   >
 9 |   and 6 million user accounts were exposed. Used as a chat engine on websites,
10 |   the leaked data included usernames, email and IP addresses along with hashed
11 |   passwords.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/src/pages/hibp.njk:
--------------------------------------------------------------------------------
 1 | ---
 2 | pagination:
 3 |   data: hibp
 4 |   size: 1
 5 |   alias: breach
 6 |   addAllPagesToCollections: true
 7 | tags:
 8 |   - breach
 9 | permalink: "/hibp/{{ breach.Name | slug }}/"
10 | eleventyComputed:
11 |   title: "Breach: {{ breach.Title }}"
12 |   date: "{{ breach.AddedDate }}"
13 | ---
14 | 
15 | <h1 id="{{ breach.Name | slug }}">{{ breach.Title }}</h1>
16 | 
17 | <p><time datetime="{{ breach.AddedDate }}">{{ breach.AddedDate }}</time></p>
18 | <p>{{ breach.Description | safe }}</p>
19 | 


--------------------------------------------------------------------------------
/www/hibp/btce/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="btce">BTC-E</h1>
 2 | 
 3 | <p><time datetime="2017-03-12T03:21:52Z">2017-03-12T03:21:52Z</time></p>
 4 | <p>
 5 |   In October 2014,
 6 |   <a
 7 |     href="https://www.databreaches.net/bitcoin-exchange-btc-e-and-bitcointalk-forum-breaches/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the Bitcoin exchange BTC-E was hacked</a
11 |   >
12 |   and 568k accounts were exposed. The data included email and IP addresses,
13 |   wallet balances and hashed passwords.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/d3scene/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="d3scene">D3Scene</h1>
 2 | 
 3 | <p><time datetime="2019-06-15T15:19:11Z">2019-06-15T15:19:11Z</time></p>
 4 | <p>
 5 |   In January 2016, the gaming website D3Scene, suffered a data breach. The
 6 |   compromised vBulletin forum exposed 569k million email addresses, IP address,
 7 |   usernames and passwords stored as salted MD5 hashes. The data was provided to
 8 |   HIBP by
 9 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
10 |   >.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/ffshrine/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="ffshrine">Final Fantasy Shrine</h1>
 2 | 
 3 | <p><time datetime="2015-10-31T12:43:58Z">2015-10-31T12:43:58Z</time></p>
 4 | <p>
 5 |   In September 2015,
 6 |   <a href="http://ffshrine.org" target="_blank" rel="noopener"
 7 |     >the Final Fantasy discussion forum known as FFShrine</a
 8 |   >
 9 |   was breached and the data dumped publicly. Approximately 620k records were
10 |   released containing email addresses, IP addresses and salted hashes of
11 |   passwords.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/nulled/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="nulled">Nulled.cr</h1>
 2 | 
 3 | <p><time datetime="2016-05-09T11:28:01Z">2016-05-09T11:28:01Z</time></p>
 4 | <p>
 5 |   In May 2016, the cracking community forum known as
 6 |   <a href="http://nulled.cr/" target="_blank" rel="noopener">Nulled.cr</a> was
 7 |   hacked and 599k user accounts were leaked publicly. The compromised data
 8 |   included email and IP addresses, weak salted MD5 password hashes and hundreds
 9 |   of thousands of private messages between members.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/autocentrum/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="autocentrum">Autocentrum.pl</h1>
 2 | 
 3 | <p><time datetime="2018-02-09T00:55:26Z">2018-02-09T00:55:26Z</time></p>
 4 | <p>
 5 |   In February 2018,
 6 |   <a
 7 |     href="https://niebezpiecznik.pl/post/wyciek-hasel-144-000-uzytkownikow-autocentrum-pl/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >data belonging to the Polish motoring website autocentrum.pl was found
11 |     online</a
12 |   >. The data contained 144k email addresses and plain text passwords.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/heroesofgaia/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="heroesofgaia">Heroes of Gaia</h1>
 2 | 
 3 | <p><time datetime="2016-11-07T08:11:03Z">2016-11-07T08:11:03Z</time></p>
 4 | <p>
 5 |   In early 2013, the online fantasy multiplayer game
 6 |   <a href="http://hog.playsnail.com" target="_blank" rel="noopener"
 7 |     >Heroes of Gaia</a
 8 |   >
 9 |   suffered a data breach. The newest records in the data set indicate a breach
10 |   date of 4 January 2013 and include usernames, IP and email addresses but no
11 |   passwords.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/kimsufi/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="kimsufi">Kimsufi</h1>
 2 | 
 3 | <p><time datetime="2016-12-27T07:05:43Z">2016-12-27T07:05:43Z</time></p>
 4 | <p>
 5 |   In mid-2015, the forum for the providers of affordable dedicated servers known
 6 |   as
 7 |   <a href="https://www.kimsufi.com" target="_blank" rel="noopener">Kimsufi</a>
 8 |   suffered a data breach. The vBulletin forum contained over half a million
 9 |   accounts including usernames, email and IP addresses and passwords stored as
10 |   salted MD5 hashes.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/abandonia/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="abandonia">Abandonia</h1>
 2 | 
 3 | <p><time datetime="2017-06-05T05:56:47Z">2017-06-05T05:56:47Z</time></p>
 4 | <p>
 5 |   In November 2015, the gaming website dedicated to classic DOS games
 6 |   <a href="http://www.abandonia.com" target="_blank" rel="noopener"
 7 |     >Abandonia</a
 8 |   >
 9 |   suffered a data breach resulting in the exposure of 776k unique user records.
10 |   The data contained email and IP addresses, usernames and salted MD5 hashes of
11 |   passwords.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/cheapassgamer/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="cheapassgamer">CheapAssGamer.com</h1>
 2 | 
 3 | <p><time datetime="2016-11-08T01:58:39Z">2016-11-08T01:58:39Z</time></p>
 4 | <p>
 5 |   In approximately mid-2015, the forum for
 6 |   <a href="https://www.cheapassgamer.com" target="_blank" rel="noopener"
 7 |     >CheapAssGamer.com</a
 8 |   >
 9 |   suffered a data breach. The database from the IP.Board based forum contained
10 |   445k accounts including usernames, email and IP addresses and salted MD5
11 |   password hashes.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/gtagaming/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="gtagaming">GTAGaming</h1>
 2 | 
 3 | <p><time datetime="2016-08-23T20:41:17Z">2016-08-23T20:41:17Z</time></p>
 4 | <p>
 5 |   In August 2016, the Grand Theft Auto forum
 6 |   <a
 7 |     href="https://motherboard.vice.com/read/grand-theft-auto-fan-site-hacked"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >GTAGaming was hacked and nearly 200k user accounts were leaked</a
11 |   >. The vBulletin based forum included usernames, email addresses and password
12 |   hashes.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/hltv/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="hltv">HLTV</h1>
 2 | 
 3 | <p><time datetime="2017-03-22T08:58:10Z">2017-03-22T08:58:10Z</time></p>
 4 | <p>
 5 |   In June 2016, the &quot;home of competitive Counter Strike&quot; website
 6 |   <a
 7 |     href="http://www.hltv.org/news/18087-security-breach"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >HLTV was hacked</a
11 |   >
12 |   and 611k accounts were exposed. The attack led to the exposure of names,
13 |   usernames, email addresses and bcrypt hashes of passwords.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/xbox-scene/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="xbox-scene">Xbox-Scene</h1>
 2 | 
 3 | <p><time datetime="2016-02-07T20:26:56Z">2016-02-07T20:26:56Z</time></p>
 4 | <p>
 5 |   In approximately February 2015, the Xbox forum known as
 6 |   <a href="http://xboxscene.com/" target="_blank" rel="noopener">Xbox-Scene</a>
 7 |   was hacked and more than 432k accounts were exposed. The IP.Board forum
 8 |   included IP addresses and passwords stored as salted hashes using a weak
 9 |   implementation enabling many to be rapidly cracked.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/xsplit/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="xsplit">XSplit</h1>
 2 | 
 3 | <p><time datetime="2015-08-08T04:28:48Z">2015-08-08T04:28:48Z</time></p>
 4 | <p>
 5 |   In November 2013, the makers of gaming live streaming and recording software
 6 |   <a
 7 |     href="https://www.xsplit.com/blog/xsplit-password-reset-alert"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >XSplit was compromised in an online attack</a
11 |   >. The data breach leaked almost 3M names, email addresses, usernames and
12 |   hashed passwords.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/armyforceonline/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="armyforceonline">Army Force Online</h1>
 2 | 
 3 | <p><time datetime="2016-11-10T03:24:38Z">2016-11-10T03:24:38Z</time></p>
 4 | <p>
 5 |   In May 2016, the online gaming site
 6 |   <a href="http://armyforceonline.com" target="_blank" rel="noopener"
 7 |     >Army Force Online</a
 8 |   >
 9 |   suffered a data breach that exposed 1.5M accounts. The breached data was found
10 |   being regularly traded online and included usernames, email and IP addresses
11 |   and MD5 passwords.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/wildstar/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="wildstar">WildStar</h1>
 2 | 
 3 | <p><time datetime="2016-03-06T21:41:16Z">2016-03-06T21:41:16Z</time></p>
 4 | <p>
 5 |   In July 2015, the IP.Board forum for the gaming website
 6 |   <a href="http://www.wildstar-online.com" target="_blank" rel="noopener"
 7 |     >WildStar</a
 8 |   >
 9 |   suffered a data breach that exposed over 738k forum members' accounts. The
10 |   data was being actively traded on underground forums and included email
11 |   addresses, birth dates and passwords.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/bombujeu/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="bombujeu">Bombuj.eu</h1>
 2 | 
 3 | <p><time datetime="2018-12-10T14:04:47Z">2018-12-10T14:04:47Z</time></p>
 4 | <p>
 5 |   In December 2018, the Slovak website for watching movies online for free
 6 |   <a href="https://www.bombuj.eu" target="_blank" rel="noopener">Bombuj.eu</a>
 7 |   suffered a data breach. The incident exposed over 575k unique email addresses
 8 |   and passwords stored as unsalted MD5 hashes. No response was received from
 9 |   Bombuj.eu when contacted about the incident.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/lotr/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="lotr">Lord of the Rings Online</h1>
 2 | 
 3 | <p><time datetime="2016-03-12T12:46:03Z">2016-03-12T12:46:03Z</time></p>
 4 | <p>
 5 |   In August 2013, the interactive video game
 6 |   <a href="https://www.lotro.com" target="_blank" rel="noopener"
 7 |     >Lord of the Rings Online</a
 8 |   >
 9 |   suffered a data breach that exposed over 1.1M players' accounts. The data was
10 |   being actively traded on underground forums and included email addresses,
11 |   birth dates and password hashes.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/ps3hax/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="ps3hax">PS3Hax</h1>
 2 | 
 3 | <p><time datetime="2016-02-07T04:44:49Z">2016-02-07T04:44:49Z</time></p>
 4 | <p>
 5 |   In approximately July 2015, the Sony Playstation hacks and mods forum known as
 6 |   <a href="http://www.ps3hax.net" target="_blank" rel="noopener">PS3Hax</a> was
 7 |   hacked and more than 447k accounts were exposed. The vBulletin forum included
 8 |   IP addresses and passwords stored as salted hashes using a weak implementation
 9 |   enabling many to be rapidly cracked.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/psx-scene/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="psx-scene">PSX-Scene</h1>
 2 | 
 3 | <p><time datetime="2016-02-07T03:46:46Z">2016-02-07T03:46:46Z</time></p>
 4 | <p>
 5 |   In approximately February 2015, the Sony Playstation forum known as
 6 |   <a href="http://psx-scene.com" target="_blank" rel="noopener">PSX-Scene</a>
 7 |   was hacked and more than 340k accounts were exposed. The vBulletin forum
 8 |   included IP addresses and passwords stored as salted hashes using a weak
 9 |   implementation enabling many to be rapidly cracked.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/bannerbit/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="bannerbit">BannerBit</h1>
 2 | 
 3 | <p><time datetime="2019-01-08T10:56:34Z">2019-01-08T10:56:34Z</time></p>
 4 | <p>
 5 |   In approximately December 2018, the online ad platform
 6 |   <a href="https://bannerbit.com/" target="_blank" rel="noopener">BannerBit</a>
 7 |   suffered a data breach. Containing 213k unique email addresses and plain text
 8 |   passwords, the data was provided to HIBP by a third party. Multiple attempts
 9 |   were made to contact BannerBit, but no response was received.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/ddo/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="ddo">Dungeons &amp; Dragons Online</h1>
 2 | 
 3 | <p><time datetime="2016-03-12T10:59:56Z">2016-03-12T10:59:56Z</time></p>
 4 | <p>
 5 |   In April 2013, the interactive video game
 6 |   <a href="https://www.ddo.com" target="_blank" rel="noopener"
 7 |     >Dungeons &amp; Dragons Online</a
 8 |   >
 9 |   suffered a data breach that exposed almost 1.6M players' accounts. The data
10 |   was being actively traded on underground forums and included email addresses,
11 |   birth dates and password hashes.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/ilikecheats/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="ilikecheats">ILikeCheats</h1>
 2 | 
 3 | <p><time datetime="2018-04-22T08:18:28Z">2018-04-22T08:18:28Z</time></p>
 4 | <p>
 5 |   In October 2014, the game cheats website known as ILikeCheats suffered a data
 6 |   breach that exposed 189k accounts. The vBulletin based forum leaked usernames,
 7 |   IP and email addresses and weak MD5 hashes of passwords. The data was provided
 8 |   with support from
 9 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
10 |   >.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/loungeboard/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="loungeboard">Lounge Board</h1>
 2 | 
 3 | <p><time datetime="2014-07-06T10:22:01Z">2014-07-06T10:22:01Z</time></p>
 4 | <p>
 5 |   At some point in 2013, 45k accounts were
 6 |   <a href="http://leak.sx/thread-186921" target="_blank" rel="noopener"
 7 |     >breached from the Lounge Board "General Discussion Forum" and then dumped
 8 |     publicly</a
 9 |   >. Lounge Board was a MyBB forum launched in 2012 and discontinued in mid 2013
10 |   (the last activity in the logs was from August 2013).
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/svenskamagic/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="svenskamagic">SvenskaMagic</h1>
 2 | 
 3 | <p><time datetime="2018-08-30T05:05:04Z">2018-08-30T05:05:04Z</time></p>
 4 | <p>
 5 |   Sometime in 2015, the Swedish magic website
 6 |   <a href="https://www.svenskamagic.com/" target="_blank" rel="noopener"
 7 |     >SvenskaMagic</a
 8 |   >
 9 |   suffered a data breach that exposed over 30k records. The compromised data
10 |   included usernames, email addresses and MD5 password hashes. The data was
11 |   self-submitted to HIBP by SvenskaMagic.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/tianya/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="tianya">Tianya</h1>
 2 | 
 3 | <p><time datetime="2016-06-30T03:39:05Z">2016-06-30T03:39:05Z</time></p>
 4 | <p>
 5 |   In December 2011,
 6 |   <a
 7 |     href="http://thehackernews.com/2011/12/tianya-chinas-biggest-online-forum-40.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >China's largest online forum known as Tianya was hacked</a
11 |   >
12 |   and tens of millions of accounts were obtained by the attacker. The leaked
13 |   data included names, usernames and email addresses.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/youporn/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="youporn">YouPorn</h1>
 2 | 
 3 | <p><time datetime="2015-07-30T05:32:00Z">2015-07-30T05:32:00Z</time></p>
 4 | <p>
 5 |   In February 2012, the adult website YouPorn
 6 |   <a
 7 |     href="http://www.huffingtonpost.com/2012/02/22/youporn-hacked-email-addresses-passwords_n_1294502.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >had over 1.3M user accounts exposed in a data breach</a
11 |   >. The publicly released data included both email addresses and plain text
12 |   passwords.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/boxee/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="boxee">Boxee</h1>
 2 | 
 3 | <p><time datetime="2014-03-30T13:07:16Z">2014-03-30T13:07:16Z</time></p>
 4 | <p>
 5 |   In March 2014, the home theatre PC software maker Boxee had their forums
 6 |   compromised in an attack. The attackers obtained the entire vBulletin MySQL
 7 |   database and promptly posted it for download on the Boxee forum itself. The
 8 |   data included 160k users, password histories, private messages and a variety
 9 |   of other data exposed across nearly 200 publicly exposed tables.
10 | </p>
11 | 


--------------------------------------------------------------------------------
/www/hibp/crackcommunity/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="crackcommunity">Crack Community</h1>
 2 | 
 3 | <p><time datetime="2015-02-03T06:30:05Z">2015-02-03T06:30:05Z</time></p>
 4 | <p>
 5 |   In late 2013, the
 6 |   <a href="http://crackcommunity.com" target="_blank" rel="noopener"
 7 |     >Crack Community</a
 8 |   >
 9 |   forum specialising in cracks for games was compromised and over 19k accounts
10 |   published online. Built on the MyBB forum platform, the compromised data
11 |   included email addresses, IP addresses and salted MD5 passwords.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/serverpact/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="serverpact">ServerPact</h1>
 2 | 
 3 | <p><time datetime="2016-09-06T04:21:06Z">2016-09-06T04:21:06Z</time></p>
 4 | <p>
 5 |   In mid-2015, the Dutch Minecraft site
 6 |   <a
 7 |     href="https://twitter.com/serverpact/status/772534083788365829"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >ServerPact was hacked</a
11 |   >
12 |   and 73k accounts were exposed. Along with birth dates, email and IP addresses,
13 |   the site also exposed SHA1 password hashes with the username as the salt.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/sktorrent/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="sktorrent">SkTorrent</h1>
 2 | 
 3 | <p><time datetime="2016-02-23T03:30:49Z">2016-02-23T03:30:49Z</time></p>
 4 | <p>
 5 |   In February 2016, the Slovak torrent tracking site SkTorrent
 6 |   <a
 7 |     href="http://tech.sme.sk/c/20099331/hackeri-ukradli-na-slovensku-118-tisic-identit.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >was hacked and over 117k records leaked online</a
11 |   >. The data dump included usernames, email addresses and passwords stored in
12 |   plain text.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/thetvdb/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="thetvdb">TheTVDB.com</h1>
 2 | 
 3 | <p><time datetime="2018-01-29T07:50:12Z">2018-01-29T07:50:12Z</time></p>
 4 | <p>
 5 |   In November 2017, the open television database known as
 6 |   <a
 7 |     href="https://forums.thetvdb.com/viewtopic.php?f=3&t=43254"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >TheTVDB.com suffered a data breach</a
11 |   >. The breached data was posted to a hacking forum and included 182k records
12 |   with usernames, email addresses and MySQL password hashes.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/aternos/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="aternos">Aternos</h1>
 2 | 
 3 | <p><time datetime="2016-10-01T23:42:56Z">2016-10-01T23:42:56Z</time></p>
 4 | <p>
 5 |   In December 2015, the service for creating and running free Minecraft servers
 6 |   known as
 7 |   <a
 8 |     href="https://twitter.com/AternosStatus/status/696121828360716288"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >Aternos suffered a data breach that impacted 1.4 million subscribers</a
12 |   >. The data included usernames, email and IP addresses and hashed passwords.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/flashflashrevolution/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="flashflashrevolution">Flash Flash Revolution (2016 breach)</h1>
 2 | 
 3 | <p><time datetime="2016-09-06T08:08:29Z">2016-09-06T08:08:29Z</time></p>
 4 | <p>
 5 |   In February 2016, the music-based rhythm game known as
 6 |   <a href="http://www.flashflashrevolution.com" target="_blank" rel="noopener"
 7 |     >Flash Flash Revolution</a
 8 |   >
 9 |   was hacked and 1.8M accounts were exposed. Along with email and IP addresses,
10 |   the vBulletin forum also exposed salted MD5 password hashes.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/gamigo/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="gamigo">Gamigo</h1>
 2 | 
 3 | <p><time datetime="2016-01-18T16:26:24Z">2016-01-18T16:26:24Z</time></p>
 4 | <p>
 5 |   In March 2012, the German online game publisher Gamigo
 6 |   <a
 7 |     href="http://www.zdnet.com/article/8-24-million-gamigo-passwords-leaked-after-hack/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >was hacked</a
11 |   >
12 |   and more than 8 million accounts publicly leaked. The breach included email
13 |   addresses and passwords stored as weak MD5 hashes with no salt.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/kickstarter/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="kickstarter">Kickstarter</h1>
 2 | 
 3 | <p><time datetime="2017-10-06T07:29:07Z">2017-10-06T07:29:07Z</time></p>
 4 | <p>
 5 |   In February 2014, the crowdfunding platform
 6 |   <a
 7 |     href="https://www.kickstarter.com/blog/important-kickstarter-security-notice"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Kickstarter announced they'd suffered a data breach</a
11 |   >. The breach contained almost 5.2 million unique email addresses, usernames
12 |   and salted SHA1 hashes of passwords.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/ancestry/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="ancestry">Ancestry</h1>
 2 | 
 3 | <p><time datetime="2017-12-24T04:28:45Z">2017-12-24T04:28:45Z</time></p>
 4 | <p>
 5 |   In November 2015, an Ancestry service known as
 6 |   <a
 7 |     href="https://blogs.ancestry.com/ancestry/2017/12/23/rootsweb-security-update/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >RootsWeb suffered a data breach</a
11 |   >. The breach was not discovered until late 2017 when a file containing almost
12 |   300k email addresses and plain text passwords was identified.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/blackhatworld/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="blackhatworld">Black Hat World</h1>
 2 | 
 3 | <p><time datetime="2015-11-03T22:20:17Z">2015-11-03T22:20:17Z</time></p>
 4 | <p>
 5 |   In June 2014, the search engine optimisation forum
 6 |   <a href="http://www.blackhatworld.com" target="_blank" rel="noopener"
 7 |     >Black Hat World</a
 8 |   >
 9 |   had three quarters of a million accounts breached from their system. The
10 |   breach included various personally identifiable attributes which were publicly
11 |   released in a MySQL database script.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/dailymotion/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="dailymotion">Dailymotion</h1>
 2 | 
 3 | <p><time datetime="2017-08-07T02:51:12Z">2017-08-07T02:51:12Z</time></p>
 4 | <p>
 5 |   In October 2016, the video sharing platform
 6 |   <a
 7 |     href="http://thehackernews.com/2016/12/dailymotion-video-hacked.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Dailymotion suffered a data breach</a
11 |   >. The attack led to the exposure of more than 85 million user accounts and
12 |   included email addresses, usernames and bcrypt hashes of passwords.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/lookbook/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="lookbook">Lookbook</h1>
 2 | 
 3 | <p><time datetime="2016-11-08T09:03:44Z">2016-11-08T09:03:44Z</time></p>
 4 | <p>
 5 |   In August 2012, the fashion site
 6 |   <a
 7 |     href="https://www.hackread.com/hacker-selling-million-lookbook-accounts/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Lookbook suffered a data breach</a
11 |   >. The data later appeared listed for sale in June 2016 and included 1.1
12 |   million usernames, email and IP addresses, birth dates and plain text
13 |   passwords.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/minefield/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="minefield">Minefield</h1>
 2 | 
 3 | <p><time datetime="2016-03-09T08:18:43Z">2016-03-09T08:18:43Z</time></p>
 4 | <p>
 5 |   In June 2015, the French Minecraft server known as
 6 |   <a href="https://www.minefield.fr" target="_blank" rel="noopener"
 7 |     >Minefield</a
 8 |   >
 9 |   was hacked and 188k member records were exposed. The IP.Board forum included
10 |   email and IP addresses, birth dates and passwords stored as salted hashes
11 |   using a weak implementation enabling many to be rapidly cracked.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/pokebip/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="pokebip">Pokébip</h1>
 2 | 
 3 | <p><time datetime="2016-09-09T04:43:00Z">2016-09-09T04:43:00Z</time></p>
 4 | <p>
 5 |   In July 2015, the French Pokémon site
 6 |   <a
 7 |     href="https://www.pokebip.com/news3382__message_de_securite_de_l_equipe_pokebip_.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Pokébip suffered a data breach</a
11 |   >
12 |   which exposed 657k subscriber identities. The data included email and IP
13 |   addresses, usernames and passwords stored as unsalted MD5 hashes.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/solomid/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="solomid">Team SoloMid</h1>
 2 | 
 3 | <p><time datetime="2016-03-09T13:04:08Z">2016-03-09T13:04:08Z</time></p>
 4 | <p>
 5 |   In December 2014, the electronic sports organisation known as
 6 |   <a
 7 |     href="http://www.dailydot.com/esports/null-consolidated-team-solomid-hack/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Team SoloMid was hacked</a
11 |   >
12 |   and 442k members accounts were leaked. The accounts included email and IP
13 |   addresses, usernames and salted hashes of passwords.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/gamerzplanet/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="gamerzplanet">Gamerzplanet</h1>
 2 | 
 3 | <p><time datetime="2016-02-05T20:12:26Z">2016-02-05T20:12:26Z</time></p>
 4 | <p>
 5 |   In approximately October 2015, the online gaming forum known as
 6 |   <a href="http://gamerzplanet.net" target="_blank" rel="noopener"
 7 |     >Gamerzplanet</a
 8 |   >
 9 |   was hacked and more than 1.2M accounts were exposed. The vBulletin forum
10 |   included IP addresses and passwords stored as salted hashes using a weak
11 |   implementation enabling many to be rapidly cracked.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/bitly/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="bitly">Bitly</h1>
 2 | 
 3 | <p><time datetime="2017-10-06T06:31:50Z">2017-10-06T06:31:50Z</time></p>
 4 | <p>
 5 |   In May 2014, the link management company
 6 |   <a
 7 |     href="https://bitly.com/blog/urgent-security-update-regarding-your-bitly-account/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Bitly announced they'd suffered a data breach</a
11 |   >. The breach contained over 9.3 million unique email addresses, usernames and
12 |   hashed passwords, most using SHA1 with a small number using bcrypt.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/evony/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="evony">Evony</h1>
 2 | 
 3 | <p><time datetime="2017-03-25T23:43:45Z">2017-03-25T23:43:45Z</time></p>
 4 | <p>
 5 |   In June 2016, the online multiplayer game
 6 |   <a
 7 |     href="http://securityaffairs.co/wordpress/52260/data-breach/evony-data-breach.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Evony was hacked</a
11 |   >
12 |   and over 29 million unique accounts were exposed. The attack led to the
13 |   exposure of usernames, email and IP addresses and MD5 hashes of passwords
14 |   (without salt).
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/morelenet/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="morelenet">Morele.net</h1>
 2 | 
 3 | <p><time datetime="2019-04-20T22:57:28Z">2019-04-20T22:57:28Z</time></p>
 4 | <p>
 5 |   In October 2018, the Polish e-commerce website
 6 |   <a
 7 |     href="https://niebezpiecznik.pl/post/morele-potwierdza-ze-wykradziono-dane-klientow/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Morele.net suffered a data breach</a
11 |   >. The incident exposed almost 2.5 million unique email addresses alongside
12 |   phone numbers, names and passwords stored as md5crypt hashes.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/myvidster/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="myvidster">MyVidster</h1>
 2 | 
 3 | <p><time datetime="2015-10-10T07:06:17Z">2015-10-10T07:06:17Z</time></p>
 4 | <p>
 5 |   In August 2015, the social video sharing and bookmarking site
 6 |   <a
 7 |     href="https://www.reddit.com/r/pwned/comments/3h4tud/myvidstercom_hacked_1_million_member_database/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >MyVidster was hacked</a
11 |   >
12 |   and nearly 20,000 accounts were dumped online. The dump included usernames,
13 |   email addresses and hashed passwords.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/ownedcore/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="ownedcore">OwnedCore</h1>
 2 | 
 3 | <p><time datetime="2016-02-06T02:53:13Z">2016-02-06T02:53:13Z</time></p>
 4 | <p>
 5 |   In approximately August 2013, the World of Warcraft exploits forum known as
 6 |   <a href="http://www.ownedcore.com" target="_blank" rel="noopener"
 7 |     >OwnedCore</a
 8 |   >
 9 |   was hacked and more than 880k accounts were exposed. The vBulletin forum
10 |   included IP addresses and passwords stored as salted hashes using a weak
11 |   implementation enabling many to be rapidly cracked.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/pokemonnegro/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="pokemonnegro">Pokémon Negro</h1>
 2 | 
 3 | <p><time datetime="2017-01-03T20:45:24Z">2017-01-03T20:45:24Z</time></p>
 4 | <p>
 5 |   In approximately October 2016, the Spanish Pokémon site
 6 |   <a href="http://pokemonnegro.com" target="_blank" rel="noopener"
 7 |     >Pokémon Negro</a
 8 |   >
 9 |   suffered a data breach. The attack resulted in the disclosure of 830k accounts
10 |   including email and IP addresses along with plain text passwords. Pokémon
11 |   Negro did not respond when contacted about the breach.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/mappery/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="mappery">Mappery</h1>
 2 | 
 3 | <p><time datetime="2018-12-18T16:19:50Z">2018-12-18T16:19:50Z</time></p>
 4 | <p>
 5 |   In December 2018, the mapping website
 6 |   <a href="http://www.mappery.com" target="_blank" rel="noopener">Mappery</a>
 7 |   suffered a data breach that exposed over 205k unique email addresses. The
 8 |   incident also exposed usernames, the geographic location of the user and
 9 |   passwords stored as unsalted SHA-1 hashes. No response was received from
10 |   Mappery when contacted about the incident.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/plex/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="plex">Plex</h1>
 2 | 
 3 | <p><time datetime="2016-02-08T01:35:48Z">2016-02-08T01:35:48Z</time></p>
 4 | <p>
 5 |   In July 2015, the discussion forum for Plex media centre
 6 |   <a
 7 |     href="https://blog.plex.tv/2015/07/02/security-notice-forum-user-password-resets"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >was hacked and over 327k accounts exposed</a
11 |   >. The IP.Board forum included IP addresses and passwords stored as salted
12 |   hashes using a weak implementation enabling many to be rapidly cracked.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/wpt/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="wpt">WPT Amateur Poker League</h1>
 2 | 
 3 | <p><time datetime="2014-02-01T02:57:21Z">2014-02-01T02:57:21Z</time></p>
 4 | <p>
 5 |   In January 2014, the
 6 |   <a href="http://www.wptapl.com" target="_blank" rel="noopener"
 7 |     >World Poker Tour (WPT) Amateur Poker League website</a
 8 |   >
 9 |   was hacked by the Twitter user @smitt3nz. The attack resulted in the public
10 |   disclosure of 175,000 accounts including 148,000 email addresses. The plain
11 |   text password for each account was also included in the breach.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/xkcd/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="xkcd">XKCD</h1>
 2 | 
 3 | <p><time datetime="2019-09-01T08:58:32Z">2019-09-01T08:58:32Z</time></p>
 4 | <p>
 5 |   In July 2019,
 6 |   <a href="https://forums.xkcd.com/" target="_blank" rel="noopener"
 7 |     >the forum for webcomic XKCD</a
 8 |   >
 9 |   suffered a data breach that impacted 562k subscribers. The breached phpBB
10 |   forum leaked usernames, email and IP addresses and passwords stored in MD5
11 |   phpBB3 format. The data was provided to HIBP by white hat security researcher
12 |   and data analyst Adam Davies.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/dangdang/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="dangdang">Dangdang</h1>
 2 | 
 3 | <p><time datetime="2019-01-10T11:15:51Z">2019-01-10T11:15:51Z</time></p>
 4 | <p>
 5 |   In 2011, the Chinese e-commerce site
 6 |   <a
 7 |     href="https://www.marbridgeconsulting.com/marbridgedaily/2011-12-29/article/52564/rumor_dangdang_alipay_suffer_data_breaches"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Dangdang suffered a data breach</a
11 |   >. The incident exposed over 4.8 million unique email addresses which were
12 |   subsequently traded online over the ensuing years.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/emuparadise/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="emuparadise">Emuparadise</h1>
 2 | 
 3 | <p><time datetime="2019-06-09T06:23:35Z">2019-06-09T06:23:35Z</time></p>
 4 | <p>
 5 |   In April 2018, the self-proclaimed &quot;biggest retro gaming website on
 6 |   earth&quot;, Emuparadise, suffered a data breach. The compromised vBulletin
 7 |   forum exposed 1.1 million email addresses, IP address, usernames and passwords
 8 |   stored as salted MD5 hashes. The data was provided to HIBP by
 9 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
10 |   >.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/patreon/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="patreon">Patreon</h1>
 2 | 
 3 | <p><time datetime="2015-10-02T02:29:20Z">2015-10-02T02:29:20Z</time></p>
 4 | <p>
 5 |   In October 2015, the crowdfunding site
 6 |   <a
 7 |     href="http://www.zdnet.com/article/patreon-hacked-anonymous-patrons-exposed/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Patreon was hacked</a
11 |   >
12 |   and over 16GB of data was released publicly. The dump included almost 14GB of
13 |   database records with more than 2.3M unique email addresses and millions of
14 |   personal messages.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/torrentinvites/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="torrentinvites">Torrent Invites</h1>
 2 | 
 3 | <p><time datetime="2017-03-22T01:14:11Z">2017-03-22T01:14:11Z</time></p>
 4 | <p>
 5 |   In December 2013, the torrent site
 6 |   <a
 7 |     href="https://www.reddit.com/r/trackers/comments/1sqqf7/torrentinvites_hacked/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Torrent Invites was hacked</a
11 |   >
12 |   and over 352k accounts were exposed. The vBulletin forum contained usernames,
13 |   email and IP addresses, birth dates and salted MD5 hashes of passwords.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/shotbow/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="shotbow">Shotbow</h1>
 2 | 
 3 | <p><time datetime="2017-10-29T23:53:20Z">2017-10-29T23:53:20Z</time></p>
 4 | <p>
 5 |   In May 2016, the multiplayer server for Minecraft service
 6 |   <a
 7 |     href="https://shotbow.net/forum/threads/security-data-breach-and-information-leak.346321/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Shotbow announced they'd suffered a data breach</a
11 |   >. The incident resulted in the exposure of over 1 million unique email
12 |   addresses, usernames and salted SHA-256 password hashes.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/hemmelig/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="hemmelig">hemmelig.com</h1>
 2 | 
 3 | <p><time datetime="2014-03-25T07:23:52Z">2014-03-25T07:23:52Z</time></p>
 4 | <p>
 5 |   In December 2011, Norway's largest online sex shop hemmelig.com was
 6 |   <a
 7 |     href="http://www.dazzlepod.com/hemmelig/?page=93"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >hacked by a collective calling themselves &quot;Team Appunity&quot;</a
11 |   >. The attack exposed over 28,000 usernames and email addresses along with
12 |   nicknames, gender, year of birth and unsalted MD5 password hashes.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/phpfreaks/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="phpfreaks">PHP Freaks</h1>
 2 | 
 3 | <p><time datetime="2015-10-30T14:19:52Z">2015-10-30T14:19:52Z</time></p>
 4 | <p>
 5 |   In October 2015, the PHP discussion board
 6 |   <a
 7 |     href="http://forums.phpfreaks.com/topic/298874-alert-the-phpfreaks-forum-members-data-appears-to-have-been-stolen"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >PHP Freaks was hacked</a
11 |   >
12 |   and 173k user accounts were publicly leaked. The breach included multiple
13 |   personal data attributes as well as salted and hashed passwords.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/trillian/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="trillian">Trillian</h1>
 2 | 
 3 | <p><time datetime="2016-07-15T11:14:44Z">2016-07-15T11:14:44Z</time></p>
 4 | <p>
 5 |   In December 2015, the instant messaging application
 6 |   <a
 7 |     href="https://www.trillian.im/help/trillian-blog-and-forums-security-incident/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Trillian suffered a data breach</a
11 |   >. The breach became known in July 2016 and exposed various personal data
12 |   attributes including names, email addresses and passwords stored as salted MD5
13 |   hashes.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/muslimmatch/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="muslimmatch">Muslim Match</h1>
 2 | 
 3 | <p><time datetime="2016-06-29T19:08:15Z">2016-06-29T19:08:15Z</time></p>
 4 | <p>
 5 |   In June 2016,
 6 |   <a
 7 |     href="https://motherboard.vice.com/read/hacked-private-messages-from-dating-site-muslim-match"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the Muslim Match dating website had 150k email addresses exposed</a
11 |   >. The data included private chats and messages between relationship seekers
12 |   and numerous other personal attributes including passwords hashed with MD5.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/planetcalypso/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="planetcalypso">Planet Calypso</h1>
 2 | 
 3 | <p><time datetime="2020-01-12T09:48:57Z">2020-01-12T09:48:57Z</time></p>
 4 | <p>
 5 |   In approximately July 2019,
 6 |   <a
 7 |     href="http://www.planetcalypsoforum.com/forums/showthread.php?311854-ET-or-Planet-Forums-ever-hacked"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the forums for the Planet Calypso game suffered a data breach</a
11 |   >. The breach of the vBulletin based forum exposed email and IP addresses,
12 |   usernames and passwords stored as salted MD5 hashes.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/ahashare/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="ahashare">AhaShare.com</h1>
 2 | 
 3 | <p><time datetime="2014-11-06T21:47:52Z">2014-11-06T21:47:52Z</time></p>
 4 | <p>
 5 |   In May 2013, the torrent site
 6 |   <a href="http://www.ahashare.com">AhaShare.com</a> suffered a breach which
 7 |   resulted in more than 180k user accounts being published publicly. The breach
 8 |   included a raft of personal information on registered users plus despite
 9 |   assertions of not distributing personally identifiable information, the site
10 |   also leaked the IP addresses used by the registered identities.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/bittorrent/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="bittorrent">BitTorrent</h1>
 2 | 
 3 | <p><time datetime="2016-06-08T10:49:24Z">2016-06-08T10:49:24Z</time></p>
 4 | <p>
 5 |   In January 2016, the forum for the popular torrent software
 6 |   <a
 7 |     href="https://motherboard.vice.com/read/another-day-another-hack-user-accounts-for-bittorrents-forum-hacking"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >BitTorrent was hacked</a
11 |   >. The IP.Board based forum stored passwords as weak SHA1 salted hashes and
12 |   the breached data also included usernames, email and IP addresses.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/epicnpc/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="epicnpc">EpicNPC</h1>
 2 | 
 3 | <p><time datetime="2019-07-27T23:11:30Z">2019-07-27T23:11:30Z</time></p>
 4 | <p>
 5 |   In January 2016, the hacked account reseller
 6 |   <a href="https://www.epicnpc.com" target="_blank" rel="noopener">EpicNPC</a>
 7 |   suffered a data breach that impacted 409k subscribers. The impacted data
 8 |   included usernames, IP and email addresses and passwords stored as salted MD5
 9 |   hashes. The data was provided to HIBP by
10 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
11 |   >.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/tumblr/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="tumblr">tumblr</h1>
 2 | 
 3 | <p><time datetime="2016-05-29T22:59:04Z">2016-05-29T22:59:04Z</time></p>
 4 | <p>
 5 |   In early 2013,
 6 |   <a
 7 |     href="https://staff.tumblr.com/post/144263069415/we-recently-learned-that-a-third-party-had"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >tumblr suffered a data breach</a
11 |   >
12 |   which resulted in the exposure of over 65 million accounts. The data was later
13 |   put up for sale on a dark market website and included email addresses and
14 |   passwords stored as salted SHA1 hashes.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/whmcs/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="whmcs">WHMCS</h1>
 2 | 
 3 | <p><time datetime="2016-06-28T23:47:07Z">2016-06-28T23:47:07Z</time></p>
 4 | <p>
 5 |   In May 2012, the web hosting, billing and automation company
 6 |   <a
 7 |     href="http://news.softpedia.com/news/UGNazi-Leaks-1-7-GB-of-Data-from-WHMCS-Servers-270914.shtml"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >WHMCS suffered a data breach</a
11 |   >
12 |   that exposed 134k email addresses. The breach included extensive information
13 |   about customers and payment histories including partial credit card numbers.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/atlasquantum/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="atlasquantum">Atlas Quantum</h1>
 2 | 
 3 | <p><time datetime="2018-08-27T01:42:34Z">2018-08-27T01:42:34Z</time></p>
 4 | <p>
 5 |   In August 2018, the cryptocurrency investment platform
 6 |   <a
 7 |     href="https://www.facebook.com/notes/atlas-quantum/comunicado-importante/2196456297259749/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Atlas Quantum suffered a data breach</a
11 |   >. The breach leaked the personal data of 261k investors on the platform
12 |   including their names, phone numbers, email addresses and account balances.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/forumcommunity/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="forumcommunity">ForumCommunity</h1>
 2 | 
 3 | <p><time datetime="2018-12-05T05:04:45Z">2018-12-05T05:04:45Z</time></p>
 4 | <p>
 5 |   In approximately mid-2016, the Italian-based service for creating forums known
 6 |   as
 7 |   <a href="https://www.forumcommunity.net/" target="_blank" rel="noopener"
 8 |     >ForumCommunity</a
 9 |   >
10 |   suffered a data breach. The incident impacted over 776k unique email addresses
11 |   along with usernames and unsalted MD5 password hashes. No response was
12 |   received from ForumCommunity when contacted.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/sweclockers/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="sweclockers">SweClockers.com</h1>
 2 | 
 3 | <p><time datetime="2017-03-22T02:01:20Z">2017-03-22T02:01:20Z</time></p>
 4 | <p>
 5 |   In early 2015, the Swedish tech news site
 6 |   <a
 7 |     href="http://www.sweclockers.com/nyhet/20800-sweclockers-drabbas-av-dataintrang"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >SweClockers was hacked</a
11 |   >
12 |   and 255k accounts were exposed. The attack led to the exposure of usernames,
13 |   email addresses and salted hashes of passwords stored with a combination of
14 |   MD5 and SHA512.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/androidforums/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="androidforums">Android Forums</h1>
 2 | 
 3 | <p><time datetime="2015-12-20T06:47:19Z">2015-12-20T06:47:19Z</time></p>
 4 | <p>
 5 |   In October 2011, the Android Forums website
 6 |   <a
 7 |     href="http://www.pcworld.com/article/259201/online_android_forum_hacked_user_data_accessed.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >was hacked</a
11 |   >
12 |   and 745k user accounts were subsequently leaked publicly. The compromised data
13 |   included email addresses, user birth dates and passwords stored as a salted
14 |   MD5 hash.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/minehut/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="minehut">Minehut</h1>
 2 | 
 3 | <p><time datetime="2019-09-17T08:27:31Z">2019-09-17T08:27:31Z</time></p>
 4 | <p>
 5 |   In May 2019, the Minecraft server website
 6 |   <a href="https://minehut.com/" target="_blank" rel="noopener">Minehut</a>
 7 |   suffered a data breach. The company advised a database backup had been
 8 |   obtained after which they subsequently notified all impacted users. 397k email
 9 |   addresses from the incident were provided to HIBP. A data set with both email
10 |   addresses and bcrypt password hashes was also later provided to HIBP.
11 | </p>
12 | 


--------------------------------------------------------------------------------
/www/hibp/vianet/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="vianet">Vianet</h1>
 2 | 
 3 | <p><time datetime="2020-04-22T03:00:17Z">2020-04-22T03:00:17Z</time></p>
 4 | <p>
 5 |   In April 2020, the Nepalese internet service provider
 6 |   <a
 7 |     href="https://myrepublica.nagariknetwork.com/news/hackers-leak-personal-info-of-vianet-users/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Vianet suffered a data breach</a
11 |   >. The attack on the ISP led to the exposure of 177k customer records
12 |   including 94k unique email addresses. Also exposed were names, phone numbers
13 |   and physical addresses.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/mathway/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="mathway">Mathway</h1>
 2 | 
 3 | <p><time datetime="2020-06-05T23:59:45Z">2020-06-05T23:59:45Z</time></p>
 4 | <p>
 5 |   In January 2020, the math solving website
 6 |   <a
 7 |     href="https://www.zdnet.com/article/25-million-user-records-leak-online-from-popular-math-app-mathway/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Mathway suffered a data breach that exposed over 25M records</a
11 |   >. The data was subsequently sold on a dark web marketplace and included
12 |   names, Google and Facebook IDs, email addresses and salted password hashes.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/unicocampania/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="unicocampania">Unico Campania</h1>
 2 | 
 3 | <p><time datetime="2020-08-19T23:29:21Z">2020-08-19T23:29:21Z</time></p>
 4 | <p>
 5 |   In August 2020, the Neapolitan public transport website
 6 |   <a
 7 |     href="https://www.fanpage.it/napoli/unico-campania-hackerato-il-sito-65mila-email-e-password-di-utenti-in-rete-subito-disattivati/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Unico Campania was hacked and the data extensively circulated</a
11 |   >. The breach contained 166k user records with email addresses and plain text
12 |   passwords.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/epicgames/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="epicgames">Epic Games</h1>
 2 | 
 3 | <p><time datetime="2016-11-07T10:19:34Z">2016-11-07T10:19:34Z</time></p>
 4 | <p>
 5 |   In August 2016,
 6 |   <a
 7 |     href="http://www.zdnet.com/article/epic-games-unreal-engine-forums-hacked-in-latest-data-breach"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the Epic Games forum suffered a data breach</a
11 |   >, allegedly due to a SQL injection vulnerability in vBulletin. The attack
12 |   resulted in the exposure of 252k accounts including usernames, email addresses
13 |   and salted MD5 hashes of passwords.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/kiwifarms/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="kiwifarms">KiwiFarms</h1>
 2 | 
 3 | <p><time datetime="2019-09-17T09:48:25Z">2019-09-17T09:48:25Z</time></p>
 4 | <p>
 5 |   In September 2019, the forum for discussing &quot;lolcows&quot; (people who
 6 |   can be milked for laughs)
 7 |   <a
 8 |     href="https://kiwifarms.net/threads/dealing-with-the-compromise.60767/"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >Kiwi Farms suffered a data breach</a
12 |   >. The disclosure notice advised that email and IP addresses, dates of birth
13 |   and content created by members were all exposed in the incident.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/linuxmint/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="linuxmint">Linux Mint</h1>
 2 | 
 3 | <p><time datetime="2016-02-22T01:28:08Z">2016-02-22T01:28:08Z</time></p>
 4 | <p>
 5 |   In February 2016, the website for the Linux distro known as Linux Mint
 6 |   <a
 7 |     href="http://thehackernews.com/2016/02/linux-mint-hack.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >was hacked and the ISO infected with a backdoor</a
11 |   >. The site also ran a phpBB forum which was subsequently put up for sale
12 |   complete with almost 145k email addresses, passwords and other personal
13 |   subscriber information.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/malwarebytes/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="malwarebytes">Malwarebytes</h1>
 2 | 
 3 | <p><time datetime="2016-03-09T11:15:43Z">2016-03-09T11:15:43Z</time></p>
 4 | <p>
 5 |   In November 2014, the
 6 |   <a
 7 |     href="http://www.scmagazine.com/malwarebytes-forum-hacked/article/385187/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Malwarebytes forum was hacked</a
11 |   >
12 |   and 111k member records were exposed. The IP.Board forum included email and IP
13 |   addresses, birth dates and passwords stored as salted hashes using a weak
14 |   implementation enabling many to be rapidly cracked.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/qip/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="qip">QIP</h1>
 2 | 
 3 | <p><time datetime="2017-01-08T22:23:19Z">2017-01-08T22:23:19Z</time></p>
 4 | <p>
 5 |   In mid-2011, the Russian instant messaging service known as
 6 |   <a
 7 |     href="http://securityaffairs.co/wordpress/51118/data-breach/qip-data-breach.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >QIP (Quiet Internet Pager) suffered a data breach</a
11 |   >. The attack resulted in the disclosure of over 26 million unique accounts
12 |   including email addresses and passwords with the data eventually appearing in
13 |   public years later.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/reincubate/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="reincubate">Reincubate</h1>
 2 | 
 3 | <p><time datetime="2020-10-29T06:01:21Z">2020-10-29T06:01:21Z</time></p>
 4 | <p>
 5 |   In October 2020, the app data company
 6 |   <a
 7 |     href="https://reincubate.com/blog/security-incident-oct-2020/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Reincubate suffered a data breach</a
11 |   >
12 |   which exposed a backup from November 2017 (the newest record in the data
13 |   appeared several months earlier). The data included over 616k unique email
14 |   addresses, names and passwords stored as PBKDF2 hashes.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/starnet/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="starnet">StarNet</h1>
 2 | 
 3 | <p><time datetime="2015-04-11T06:35:46Z">2015-04-11T06:35:46Z</time></p>
 4 | <p>
 5 |   In February 2015, the Moldavian ISP &quot;StarNet&quot;
 6 |   <a
 7 |     href="http://www.moldova.org/the-database-of-an-internet-provider-from-moldova-was-stolen-and-published/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >had it's database published online</a
11 |   >. The dump included nearly 140k email addresses, many with personal details
12 |   including contact information, usage patterns of the ISP and even passport
13 |   numbers.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/cannabisforum/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="cannabisforum">Cannabis.com</h1>
 2 | 
 3 | <p><time datetime="2014-06-01T07:55:24Z">2014-06-01T07:55:24Z</time></p>
 4 | <p>
 5 |   In February 2014, the vBulletin forum for the Marijuana site cannabis.com was
 6 |   breached and
 7 |   <a
 8 |     href="https://www.google.com/search?q=%22cannabisforum.tar%22"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >leaked publicly</a
12 |   >. Whilst there has been no public attribution of the breach, the leaked data
13 |   included over 227k accounts and nearly 10k private messages between users of
14 |   the forum.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/devkitpro/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="devkitpro">devkitPro</h1>
 2 | 
 3 | <p><time datetime="2019-02-11T07:21:44Z">2019-02-11T07:21:44Z</time></p>
 4 | <p>
 5 |   In February 2019,
 6 |   <a
 7 |     href="https://devkitpro.org/viewtopic.php?f=13&t=8846"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the devkitPro forum suffered a data breach</a
11 |   >. The phpBB based forum had 1,508 unique email addresses exposed in the
12 |   breach alongside forum posts, private messages and passwords stored as weak
13 |   salted hashes. The data breach was self-submitted to HIBP by the forum
14 |   operator.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/htcmania/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="htcmania">HTC Mania</h1>
 2 | 
 3 | <p><time datetime="2020-04-06T04:16:53Z">2020-04-06T04:16:53Z</time></p>
 4 | <p>
 5 |   In January 2020, the Spanish mobile phone forum
 6 |   <a href="https://www.htcmania.com" target="_blank" rel="noopener"
 7 |     >HTC Mania</a
 8 |   >
 9 |   suffered a data breach of the vBulletin based site. The incident exposed 1.5M
10 |   member email addresses, usernames, IP addresses, dates of birth and salted MD5
11 |   password hashes and password histories. Data from the breach was subsequently
12 |   redistributed on popular hacking websites.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/hub4tech/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="hub4tech">Hub4Tech</h1>
 2 | 
 3 | <p><time datetime="2018-12-09T22:40:51Z">2018-12-09T22:40:51Z</time></p>
 4 | <p>
 5 |   On an unknown date in approximately 2017, the Indian training and assessment
 6 |   service known as
 7 |   <a href="https://www.forumcommunity.net/" target="_blank" rel="noopener"
 8 |     >Hub4Tech</a
 9 |   >
10 |   suffered a data breach via a SQL injection attack. The incident exposed almost
11 |   37k unique email addresses and passwords stored as unsalted MD5 hashes. No
12 |   response was received from Hub4Tech when contacted about the incident.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/utorrent/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="utorrent">uTorrent</h1>
 2 | 
 3 | <p><time datetime="2016-11-05T22:32:39Z">2016-11-05T22:32:39Z</time></p>
 4 | <p>
 5 |   In early 2016, the forum for the uTorrent BitTorrent client
 6 |   <a
 7 |     href="https://torrentfreak.com/utorrent-forums-hacked-passwords-compromised-160608/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >suffered a data breach</a
11 |   >
12 |   which came to light later in the year. The database from the IP.Board based
13 |   forum contained 395k accounts including usernames, email addresses and MD5
14 |   password hashes without a salt.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/elance/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="elance">Elance</h1>
 2 | 
 3 | <p><time datetime="2017-02-18T02:54:48Z">2017-02-18T02:54:48Z</time></p>
 4 | <p>
 5 |   Sometime in 2009, staffing platform
 6 |   <a
 7 |     href="http://www.ibtimes.co.uk/elance-data-breach-hacker-leaks-1-3-million-accounts-staffing-platform-1605368"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Elance suffered a data breach that impacted 1.3 million accounts</a
11 |   >. Appearing online 8 years later, the data contained usernames, email
12 |   addresses, phone numbers and SHA1 hashes of passwords, amongst other personal
13 |   data.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/everybodyedits/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="everybodyedits">Everybody Edits</h1>
 2 | 
 3 | <p><time datetime="2019-04-03T10:50:16Z">2019-04-03T10:50:16Z</time></p>
 4 | <p>
 5 |   In March 2019, the multiplayer platform game
 6 |   <a
 7 |     href="https://everybodyedits.wordpress.com/2019/03/28/everybody-edits-data-security-breach/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Everybody Edits suffered a data breach</a
11 |   >. The incident exposed 871k unique email addresses alongside usernames and IP
12 |   addresses. The data was subsequently distributed online across a collection of
13 |   files.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/glofox/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="glofox">Glofox</h1>
 2 | 
 3 | <p><time datetime="2021-01-10T01:30:48Z">2021-01-10T01:30:48Z</time></p>
 4 | <p>
 5 |   In March 2020, the Irish gym management software company
 6 |   <a
 7 |     href="https://www.irishtimes.com/business/technology/irish-start-up-glofox-investigates-possible-data-breach-1.4414837"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Glofox suffered a data breach which exposed 2.3M membership records</a
11 |   >. The data included email addresses, names, phone numbers, genders, dates of
12 |   birth and passwords stored as unsalted MD5 hashes.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/linuxforums/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="linuxforums">Linux Forums</h1>
 2 | 
 3 | <p><time datetime="2018-06-07T12:55:25Z">2018-06-07T12:55:25Z</time></p>
 4 | <p>
 5 |   In May 2018,
 6 |   <a href="http://www.linuxforums.org" target="_blank" rel="noopener"
 7 |     >the Linux Forums website</a
 8 |   >
 9 |   suffered a data breach which resulted in the disclosure of 276k unique email
10 |   addresses. Running on an old version of vBulletin, the breach also disclosed
11 |   usernames, IP addresses and salted MD5 password hashes. Linux Forums did not
12 |   respond to multiple attempts to contact them about the breach.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/neteller/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="neteller">Neteller</h1>
 2 | 
 3 | <p><time datetime="2015-11-30T10:26:47Z">2015-11-30T10:26:47Z</time></p>
 4 | <p>
 5 |   In May 2010, the e-wallet service known as Neteller
 6 |   <a
 7 |     href="http://www.forbes.com/sites/thomasbrewster/2015/11/30/paysafe-optimal-neteller-moneybookers-gambling-cyberattacks-data-breach/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >suffered a data breach which exposed over 3.6M customers</a
11 |   >. The breach was not discovered until October 2015 and included names, email
12 |   addresses, home addresses and account balances.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/nonnudegirls/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="nonnudegirls">Non Nude Girls</h1>
 2 | 
 3 | <p><time datetime="2017-01-25T06:38:36Z">2017-01-25T06:38:36Z</time></p>
 4 | <p>
 5 |   In May 2013, the non-consensual voyeurism site
 6 |   <a
 7 |     href="http://www.ibtimes.co.uk/upskirt-porn-website-hit-massive-data-leak-exposing-nearly-180000-voyeurs-1602756"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >&quot;Non Nude Girls&quot; suffered a data breach</a
11 |   >. The hack of the vBulletin forum led to the exposure of over 75k accounts
12 |   along with email and IP addresses, names and plain text passwords.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/underworldempire/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="underworldempire">Underworld Empire</h1>
 2 | 
 3 | <p><time datetime="2018-02-19T10:28:11Z">2018-02-19T10:28:11Z</time></p>
 4 | <p>
 5 |   In April 2017,
 6 |   <a href="http://underworldempireforums.com/" target="_blank" rel="noopener"
 7 |     >the vBulletin forum for the Underworld Empire game</a
 8 |   >
 9 |   suffered a data breach that exposed 429k accounts. The data was then posted to
10 |   a hacking forum in mid-February 2018 where it was made available to download.
11 |   The source data contained IP and email addresses, usernames and salted MD5
12 |   hashes.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/unrealengine/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="unrealengine">Unreal Engine</h1>
 2 | 
 3 | <p><time datetime="2016-11-07T09:04:54Z">2016-11-07T09:04:54Z</time></p>
 4 | <p>
 5 |   In August 2016,
 6 |   <a
 7 |     href="http://www.zdnet.com/article/epic-games-unreal-engine-forums-hacked-in-latest-data-breach"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the Unreal Engine Forum suffered a data breach</a
11 |   >, allegedly due to a SQL injection vulnerability in vBulletin. The attack
12 |   resulted in the exposure of 530k accounts including usernames, email addresses
13 |   and salted MD5 hashes of passwords.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/verified/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="verified">Verified</h1>
 2 | 
 3 | <p><time datetime="2014-07-06T04:16:37Z">2014-07-06T04:16:37Z</time></p>
 4 | <p>
 5 |   In January 2014,
 6 |   <a
 7 |     href="http://securityaffairs.co/wordpress/21120/cyber-crime/verified-communities-hacked.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >one of the largest communities of Eastern Europe cybercriminals known as
11 |     "Verified" was hacked</a
12 |   >. The breach exposed nearly 17k users of the vBulletin forum including their
13 |   personal messages and other potentially personally identifiable information.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/crackedto/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="crackedto">Cracked.to</h1>
 2 | 
 3 | <p><time datetime="2019-08-12T11:18:56Z">2019-08-12T11:18:56Z</time></p>
 4 | <p>
 5 |   In July 2019, the hacking website
 6 |   <a href="https://cracked.to" target="_blank" rel="noopener">Cracked.to</a>
 7 |   suffered a data breach. There were 749k unique email addresses spread across
 8 |   321k forum users and other tables in the database. A rival hacking website
 9 |   claimed responsibility for breaching the MyBB based forum which disclosed
10 |   email and IP addresses, usernames, private messages and passwords stored as
11 |   bcrypt hashes.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/imesh/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="imesh">iMesh</h1>
 2 | 
 3 | <p><time datetime="2016-07-02T05:42:13Z">2016-07-02T05:42:13Z</time></p>
 4 | <p>
 5 |   In September 2013, the media and file sharing client known as
 6 |   <a
 7 |     href="http://www.ibtimes.co.uk/imesh-hack-more-51-million-user-records-former-filesharing-site-sale-dark-web-1565185"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >iMesh was hacked and approximately 50M accounts were exposed</a
11 |   >. The data was later put up for sale on a dark market website in mid-2016 and
12 |   included email and IP addresses, usernames and salted MD5 hashes.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/peatix/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="peatix">Peatix</h1>
 2 | 
 3 | <p><time datetime="2020-12-06T22:53:53Z">2020-12-06T22:53:53Z</time></p>
 4 | <p>
 5 |   In January 2019, the event organising platform
 6 |   <a
 7 |     href="https://www.zdnet.com/article/hacker-leaks-the-user-data-of-event-management-app-peatix/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Peatix suffered a data breach</a
11 |   >. The incident exposed 4.2M email addresses, names and salted password
12 |   hashes. The data was provided to HIBP by
13 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
14 |   >.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/animegame/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="animegame">AnimeGame</h1>
 2 | 
 3 | <p><time datetime="2020-03-09T05:52:08Z">2020-03-09T05:52:08Z</time></p>
 4 | <p>
 5 |   In February 2020, the gaming website
 6 |   <a href="http://animegame.me/" target="_blank" rel="noopener">AnimeGame</a>
 7 |   suffered a data breach. The incident affected 1.4M subscribers and exposed
 8 |   email addresses, usernames and passwords stored as salted MD5 hashes. The data
 9 |   was subsequently shared on a popular hacking forum and was provided to HIBP by
10 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
11 |   >.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/cdprojektred/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="cdprojektred">CD Projekt RED</h1>
 2 | 
 3 | <p><time datetime="2017-01-31T06:40:09Z">2017-01-31T06:40:09Z</time></p>
 4 | <p>
 5 |   In March 2016,
 6 |   <a
 7 |     href="http://forums.cdprojektred.com/forum/en/the-witcher-series/news-aa/7248610-important-potential-unauthorized-access-to-the-forums%E2%80%99-data"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Polish game developer CD Projekt RED suffered a data breach</a
11 |   >. The hack of their forum led to the exposure of almost 1.9 million accounts
12 |   along with usernames, email addresses and salted SHA1 passwords.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/comcast/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="comcast">Comcast</h1>
 2 | 
 3 | <p><time datetime="2016-02-08T21:41:43Z">2016-02-08T21:41:43Z</time></p>
 4 | <p>
 5 |   In November 2015, the US internet and cable TV provider Comcast
 6 |   <a
 7 |     href="http://www.ibtimes.co.uk/comcast-data-breach-590000-customer-passwords-go-sale-dark-web-1528026"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >suffered a data breach that exposed 590k customer email addresses and plain
11 |     text passwords</a
12 |   >. A further 27k accounts appeared with home addresses with the entire data
13 |   set being sold on underground forums.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/faceup/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="faceup">FaceUP</h1>
 2 | 
 3 | <p><time datetime="2019-01-13T09:50:41Z">2019-01-13T09:50:41Z</time></p>
 4 | <p>
 5 |   In 2013, the Danish social media site
 6 |   <a href="https://faceup.dk/" target="_blank" rel="noopener">FaceUP</a>
 7 |   suffered a data breach. The incident exposed 87k unique email addresses
 8 |   alongside genders, dates of birth, names, phone numbers and passwords stored
 9 |   as unsalted MD5 hashes. When notified of the incident, FaceUP advised they had
10 |   identified a SQL injection vulnerability at the time and forced password
11 |   resets on impacted customers.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/napsgear/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="napsgear">NapsGear</h1>
 2 | 
 3 | <p><time datetime="2018-09-10T11:07:00Z">2018-09-10T11:07:00Z</time></p>
 4 | <p>
 5 |   In October 2015, the anabolic steroids retailer
 6 |   <a
 7 |     href="https://thinksteroids.com/community/threads/warning-naps-customer-database-compromised.134375549/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >NapsGear suffered a data breach</a
11 |   >. An extensive amount of personal information on 287k customers was exposed
12 |   including email addresses, names, addresses, phone numbers, purchase histories
13 |   and salted MD5 password hashes.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/nextgenupdate/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="nextgenupdate">NextGenUpdate</h1>
 2 | 
 3 | <p><time datetime="2015-06-05T04:12:29Z">2015-06-05T04:12:29Z</time></p>
 4 | <p>
 5 |   Early in 2014, the video game website
 6 |   <a href="http://www.nextgenupdate.com" target="_blank" rel="noopener"
 7 |     >NextGenUpdate</a
 8 |   >
 9 |   reportedly
10 |   <a href="https://leakforums.org/thread-265363" target="_blank" rel="noopener"
11 |     >suffered a data breach</a
12 |   >
13 |   that disclosed almost 1.2 million accounts. Amongst the data breach was
14 |   usernames, email addresses, IP addresses and salted and hashed passwords.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/voidto/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="voidto">Void.to</h1>
 2 | 
 3 | <p><time datetime="2019-09-11T06:47:08Z">2019-09-11T06:47:08Z</time></p>
 4 | <p>
 5 |   In June 2019, the hacking website
 6 |   <a href="https://void.to/" target="_blank" rel="noopener">Void.to</a> suffered
 7 |   a data breach. There were 95k unique email addresses spread across 86k forum
 8 |   users and other tables in the database. A rival hacking website claimed
 9 |   responsibility for breaching the MyBB based forum which disclosed email and IP
10 |   addresses, usernames, private messages and passwords stored as either salted
11 |   MD5 or bcrypt hashes.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/artvalue/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="artvalue">Artvalue</h1>
 2 | 
 3 | <p><time datetime="2019-07-19T13:16:52Z">2019-07-19T13:16:52Z</time></p>
 4 | <p>
 5 |   In June 2019, the France-based art valuation website
 6 |   <a href="http://artvalue.com/" target="_blank" rel="noopener">Artvalue.com</a>
 7 |   left their 158k member subscriber base publicly exposed in a text file on
 8 |   their website. The exposed data included names, usernames, email addresses and
 9 |   passwords stored as MD5 hashes. The site operator did not respond when
10 |   contacted about the incident, although the exposed file was subsequently
11 |   removed.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/babynames/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="babynames">Baby Names</h1>
 2 | 
 3 | <p><time datetime="2018-10-24T06:27:03Z">2018-10-24T06:27:03Z</time></p>
 4 | <p>
 5 |   In approximately 2008, the site to help parents name their children known as
 6 |   <a href="https://www.babynames.com/" target="_blank" rel="noopener"
 7 |     >Baby Names</a
 8 |   >
 9 |   suffered a data breach. The incident exposed 846k email addresses and
10 |   passwords stored as salted MD5 hashes. When contacted in October 2018, Baby
11 |   Names advised that &quot;the breach happened at least ten years ago&quot; and
12 |   that members were notified at the time.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/beautifulpeople/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="beautifulpeople">Beautiful People</h1>
 2 | 
 3 | <p><time datetime="2016-04-25T10:05:34Z">2016-04-25T10:05:34Z</time></p>
 4 | <p>
 5 |   In November 2015, the dating website
 6 |   <a
 7 |     href="http://www.forbes.com/sites/thomasbrewster/2016/04/25/beautiful-people-hack-sexual-preference-location-addresses/#26a2cdf7559f"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Beautiful People was hacked</a
11 |   >
12 |   and over 1.1M accounts were leaked. The data was being traded in underground
13 |   circles and included a huge amount of personal information related to dating.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/dafont/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="dafont">DaFont</h1>
 2 | 
 3 | <p><time datetime="2017-05-18T20:05:28Z">2017-05-18T20:05:28Z</time></p>
 4 | <p>
 5 |   In May 2017,
 6 |   <a
 7 |     href="http://www.zdnet.com/article/font-sharing-site-dafont-hacked-thousands-of-accounts-stolen/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >font sharing site DaFont suffered a data breach</a
11 |   >
12 |   resulting in the exposure of 637k records. Allegedly due to a SQL injection
13 |   vulnerability exploited by multiple parties, the exposed data included
14 |   usernames, email addresses and passwords stored as MD5 without a salt.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/dvdshopch/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="dvdshopch">dvd-shop.ch</h1>
 2 | 
 3 | <p><time datetime="2017-12-10T04:58:09Z">2017-12-10T04:58:09Z</time></p>
 4 | <p>
 5 |   In December 2017, the online Swiss DVD store known as
 6 |   <a
 7 |     href="https://www.melani.admin.ch/melani/de/home/dokumentation/newsletter/passwoerter-von-70000-e-mail-konten-im-umlauf.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >dvd-shop.ch suffered a data breach</a
11 |   >. The incident led to the exposure of 68k email addresses and plain text
12 |   passwords. The site has since been updated to indicate that it is currently
13 |   closed.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/gametuts/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="gametuts">GameTuts</h1>
 2 | 
 3 | <p><time datetime="2016-09-23T23:59:38Z">2016-09-23T23:59:38Z</time></p>
 4 | <p>
 5 |   Likely in early 2015, the video game website GameTuts suffered a data breach
 6 |   and over 2 million user accounts were exposed. The site later
 7 |   <a
 8 |     href="https://twitter.com/TeamModio/status/756705841168916486"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >shut down in July 2016</a
12 |   >
13 |   but was identified as having been hosted on a vBulletin forum. The exposed
14 |   data included usernames, email and IP addresses and salted MD5 hashes.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/gpsunderground/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="gpsunderground">GPS Underground</h1>
 2 | 
 3 | <p><time datetime="2019-11-19T06:13:42Z">2019-11-19T06:13:42Z</time></p>
 4 | <p>
 5 |   In early 2017,
 6 |   <a
 7 |     href="https://www.hackread.com/vbulletin-forums-hacked-accounts-sold-on-dark-web/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >GPS Underground was amongst a collection of compromised vBulletin websites
11 |     that were found being sold online</a
12 |   >. The breach dated back to mid-2016 and included 670k records with usernames,
13 |   email and IP addresses, dates of birth and salted MD5 password hashes.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/r2-2017/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="r2-2017">R2 (2017 forum breach)</h1>
 2 | 
 3 | <p><time datetime="2017-04-25T11:04:29Z">2017-04-25T11:04:29Z</time></p>
 4 | <p>
 5 |   In early 2017, the forum for the gaming website
 6 |   <a
 7 |     href="http://www.csoonline.com/article/3192246/security/r2games-compromised-again-over-one-million-accounts-exposed.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >R2 Games was hacked</a
11 |   >. R2 had previously appeared on HIBP in 2015 after a prior incident. This one
12 |   exposed over 1 million unique user accounts and corresponding MD5 password
13 |   hashes with no salt.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/russianamerica/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="russianamerica">Russian America</h1>
 2 | 
 3 | <p><time datetime="2018-09-13T04:48:08Z">2018-09-13T04:48:08Z</time></p>
 4 | <p>
 5 |   In approximately 2017, the website for Russian speakers in America known as
 6 |   <a href="http://www.russianamerica.com/" target="_blank" rel="noopener"
 7 |     >Russian America</a
 8 |   >
 9 |   suffered a data breach. The incident exposed 183k unique records including
10 |   names, email addresses, phone numbers and passwords stored in both plain text
11 |   and as MD5 hashes. Russian America was contacted about the breach but did not
12 |   respond.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/slickwraps/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="slickwraps">Slickwraps</h1>
 2 | 
 3 | <p><time datetime="2020-02-22T19:20:00Z">2020-02-22T19:20:00Z</time></p>
 4 | <p>
 5 |   In February 2020, the online store for consumer electronics wraps
 6 |   <a
 7 |     href="https://www.slickwraps.com/blog/update/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Slickwraps suffered a data breach</a
11 |   >. The incident resulted in the exposure of 858k unique email addresses across
12 |   customer records and newsletter subscribers. Additional impacted data included
13 |   names, physical addresses, phone numbers and purchase histories.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/tamodo/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="tamodo">Tamodo</h1>
 2 | 
 3 | <p><time datetime="2020-03-24T23:47:43Z">2020-03-24T23:47:43Z</time></p>
 4 | <p>
 5 |   In February 2020, the affiliate marketing network
 6 |   <a href="https://www.tamodo.com/" target="_blank" rel="noopener">Tamodo</a>
 7 |   suffered a data breach which was subsequently shared on a popular hacking
 8 |   forum. The incident exposed almost 500k accounts including names, email
 9 |   addresses, dates of birth and passwords stored as bcrypt hashes. Tamodo failed
10 |   to respond to multiple attempts to report the breach via published
11 |   communication channels.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/vk/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="vk">VK</h1>
 2 | 
 3 | <p><time datetime="2016-06-09T09:16:36Z">2016-06-09T09:16:36Z</time></p>
 4 | <p>
 5 |   In approximately 2012, the Russian social media site known as
 6 |   <a
 7 |     href="http://motherboard.vice.com/read/another-day-another-hack-100-million-accounts-for-vk-russias-facebook"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >VK was hacked</a
11 |   >
12 |   and almost 100 million accounts were exposed. The data emerged in June 2016
13 |   where it was being sold via a dark market website and included names, phone
14 |   numbers email addresses and plain text passwords.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/win7vista/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="win7vista">Win7Vista Forum</h1>
 2 | 
 3 | <p><time datetime="2014-06-01T10:01:32Z">2014-06-01T10:01:32Z</time></p>
 4 | <p>
 5 |   In September 2013, the
 6 |   <a href="http://www.win7vista.com" target="_blank" rel="noopener"
 7 |     >Win7Vista</a
 8 |   >
 9 |   Windows forum (since renamed to the "Beyond Windows 9" forum) was hacked and
10 |   later
11 |   <a href="http://leak.sx/thread-186933" target="_blank" rel="noopener"
12 |     >had its internal database dumped</a
13 |   >. The dump included over 200k members’ personal information and other
14 |   internal data extracted from the forum.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/wizishop/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="wizishop">WiziShop</h1>
 2 | 
 3 | <p><time datetime="2020-10-05T03:42:29Z">2020-10-05T03:42:29Z</time></p>
 4 | <p>
 5 |   In July 2020, the French e-commerce platform
 6 |   <a href="https://www.wizishop.fr/" target="_blank" rel="noopener">WiziShop</a>
 7 |   suffered a data breach. The breach exposed 18GB worth of data including names,
 8 |   phone numbers, dates of birth, physical and IP addresses, SHA-1 password
 9 |   hashes and almost 3 million unique email addresses. The data was provided to
10 |   HIBP by a source who requested it be attributed to
11 |   &quot;pompompurin@riseup.net&quot;.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/xhamster/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="xhamster">xHamster</h1>
 2 | 
 3 | <p><time datetime="2018-03-08T02:09:26Z">2018-03-08T02:09:26Z</time></p>
 4 | <p>
 5 |   In November 2016, news broke that
 6 |   <a
 7 |     href="https://motherboard.vice.com/en_us/article/kb7kqx/hackers-are-trading-hundreds-of-thousands-of-xhamster-porn-account-details"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >hackers were trading hundreds of thousands of xHamster porn account
11 |     details</a
12 |   >. In total, the data contained almost 380k unique user records including
13 |   email addresses, usernames and unsalted MD5 password hashes.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/000webhost/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="000webhost">000webhost</h1>
 2 | 
 3 | <p><time datetime="2015-10-26T23:35:45Z">2015-10-26T23:35:45Z</time></p>
 4 | <p>
 5 |   In approximately March 2015, the free web hosting provider
 6 |   <a
 7 |     href="http://www.troyhunt.com/2015/10/breaches-traders-plain-text-passwords.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >000webhost suffered a major data breach</a
11 |   >
12 |   that exposed almost 15 million customer records. The data was sold and traded
13 |   before 000webhost was alerted in October. The breach included names, email
14 |   addresses and plain text passwords.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/fashionfantasygame/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="fashionfantasygame">FashionFantasyGame</h1>
 2 | 
 3 | <p><time datetime="2017-04-20T10:33:38Z">2017-04-20T10:33:38Z</time></p>
 4 | <p>
 5 |   In late 2016, the fashion gaming website
 6 |   <a
 7 |     href="http://www.zdnet.com/article/amid-data-breach-responsibility-thrown-to-the-wind/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Fashion Fantasy Game suffered a data breach</a
11 |   >. The incident exposed 2.3 million unique user accounts and corresponding MD5
12 |   password hashes with no salt. The data was contributed to Have I Been Pwned
13 |   courtesy of rip@creep.im.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/furaffinity/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="furaffinity">Fur Affinity</h1>
 2 | 
 3 | <p><time datetime="2016-05-27T09:36:18Z">2016-05-27T09:36:18Z</time></p>
 4 | <p>
 5 |   In May 2016, the Fur Affinity website for people with an interest in
 6 |   anthropomorphic animal characters (also known as "furries")
 7 |   <a
 8 |     href="http://motherboard.vice.com/read/another-day-another-hack-furry-site-hacked-content-deleted"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >was hacked</a
12 |   >. The attack exposed 1.2M email addresses (many accounts had a different
13 |   "first" and "last" email against them) and hashed passwords.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/r2games/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="r2games">R2Games</h1>
 2 | 
 3 | <p><time datetime="2016-02-09T12:20:35Z">2016-02-09T12:20:35Z</time></p>
 4 | <p>
 5 |   In late 2015, the gaming website
 6 |   <a href="https://www.r2games.com" target="_blank" rel="noopener">R2Games</a>
 7 |   was hacked and more than 2.1M personal records disclosed. The vBulletin forum
 8 |   included IP addresses and passwords stored as salted hashes using a weak
 9 |   implementation enabling many to be rapidly cracked. A further 11M accounts
10 |   were added to "Have I Been Pwned" in March 2016 and another 9M in July 2016
11 |   bringing the total to over 22M.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/viewfines/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="viewfines">ViewFines</h1>
 2 | 
 3 | <p><time datetime="2018-05-24T09:11:55Z">2018-05-24T09:11:55Z</time></p>
 4 | <p>
 5 |   In May 2018, the South African website for viewing traffic fines online known
 6 |   as
 7 |   <a
 8 |     href="https://www.iafrikan.com/2018/05/24/south-africas-viewfines-suffered-major-data-leak/"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >ViewFines suffered a data breach</a
12 |   >. Over 934k records containing 778k unique email addresses were exposed and
13 |   included names, phone numbers, government issued IDs and passwords stored in
14 |   plain text.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/17media/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="17media">17</h1>
 2 | 
 3 | <p><time datetime="2016-07-08T01:55:03Z">2016-07-08T01:55:03Z</time></p>
 4 | <p>
 5 |   In April 2016, customer data obtained from the streaming app known as
 6 |   &quot;17&quot;
 7 |   <a
 8 |     href="http://motherboard.vice.com/read/another-day-another-hack-millions-of-user-accounts-for-streaming-app-17"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >appeared listed for sale on a Tor hidden service marketplace</a
12 |   >. The data contained over 4 million unique email addresses along with IP
13 |   addresses, usernames and passwords stored as unsalted MD5 hashes.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/cafepress/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="cafepress">CafePress</h1>
 2 | 
 3 | <p><time datetime="2019-08-05T01:18:43Z">2019-08-05T01:18:43Z</time></p>
 4 | <p>
 5 |   In February 2019, the custom merchandise retailer
 6 |   <a href="https://www.cafepress.com/" target="_blank" rel="noopener"
 7 |     >CafePress</a
 8 |   >
 9 |   suffered a data breach. The exposed data included 23 million unique email
10 |   addresses with some records also containing names, physical addresses, phone
11 |   numbers and passwords stored as SHA-1 hashes. The data was provided to HIBP by
12 |   a source who requested it be attributed to "JimScott.Sec@protonmail.com".
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/creative/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="creative">Creative</h1>
 2 | 
 3 | <p><time datetime="2018-06-07T21:00:31Z">2018-06-07T21:00:31Z</time></p>
 4 | <p>
 5 |   In May 2018,
 6 |   <a href="http://forums.creative.com/" target="_blank" rel="noopener"
 7 |     >the forum for Singaporean hardware company Creative Technology</a
 8 |   >
 9 |   suffered a data breach which resulted in the disclosure of 483k unique email
10 |   addresses. Running on an old version of vBulletin, the breach also disclosed
11 |   usernames, IP addresses and salted MD5 password hashes. After being notified
12 |   of the incident, Creative permanently shut down the forum.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/payasugym/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="payasugym">PayAsUGym</h1>
 2 | 
 3 | <p><time datetime="2016-12-17T06:45:44Z">2016-12-17T06:45:44Z</time></p>
 4 | <p>
 5 |   In December 2016,
 6 |   <a
 7 |     href="https://twitter.com/real_1x0123/status/809443917984911364"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >an attacker breached PayAsUGym's website</a
11 |   >
12 |   exposing over 400k customers' personal data. The data was consequently leaked
13 |   publicly and broadly distributed via Twitter. The leaked data contained
14 |   personal information including email addresses and passwords hashed using MD5
15 |   without a salt.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/chowbus/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="chowbus">Chowbus</h1>
 2 | 
 3 | <p><time datetime="2020-10-06T06:07:45Z">2020-10-06T06:07:45Z</time></p>
 4 | <p>
 5 |   In October 2020, the Asian food delivery app
 6 |   <a
 7 |     href="https://www.reddit.com/r/UIUC/comments/j5fcjp/chowbus_is_hacked_leaks_800000_entries_of/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Chowbus suffered a data breach which led to over 800,000 records being
11 |     emailed to customers</a
12 |   >. The email contained a link to a CSV file with customer data including
13 |   physical addresses, names, phone numbers and over 444,000 unique email
14 |   addresses.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/nulledch/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="nulledch">Nulled.ch</h1>
 2 | 
 3 | <p><time datetime="2020-05-24T07:05:43Z">2020-05-24T07:05:43Z</time></p>
 4 | <p>
 5 |   In May 2020, the hacking forum
 6 |   <a href="https://www.nulled.ch/" target="_blank" rel="noopener">Nulled.ch</a>
 7 |   was breached and the data published to a rival hacking forum. Over 43k records
 8 |   were compromised and included IP and email addresses, usernames and passwords
 9 |   stored as salted MD5 hashes alongside the private message history of the
10 |   website's admin. The data was provided to HIBP by a source who requested it be
11 |   attributed to &quot;Split10&quot;.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/adultfriendfinder/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="adultfriendfinder">Adult FriendFinder (2015)</h1>
 2 | 
 3 | <p><time datetime="2015-05-22T06:03:44Z">2015-05-22T06:03:44Z</time></p>
 4 | <p>
 5 |   In May 2015, the adult hookup site
 6 |   <a
 7 |     href="http://www.bbc.com/news/business-32839196"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Adult FriendFinder was hacked</a
11 |   >
12 |   and nearly 4 million records dumped publicly. The data dump included extremely
13 |   sensitive personal information about individuals and their relationship
14 |   statuses and sexual preferences combined with personally identifiable
15 |   information.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/appartoo/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="appartoo">Appartoo</h1>
 2 | 
 3 | <p><time datetime="2019-05-02T07:07:24Z">2019-05-02T07:07:24Z</time></p>
 4 | <p>
 5 |   In March 2017, the French Flatsharing site known as
 6 |   <a href="https://www.appartoo.com" target="_blank" rel="noopener">Appartoo</a>
 7 |   suffered a data breach. The incident exposed an extensive amount of personal
 8 |   information on almost 50k members including email addresses, genders, ages,
 9 |   private messages sent between users of the service and passwords stored as
10 |   SHA-256 hashes. Appartoo advised that all subscribers were notified of the
11 |   incident in early 2017.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/facepunch/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="facepunch">Facepunch</h1>
 2 | 
 3 | <p><time datetime="2018-10-17T13:15:39Z">2018-10-17T13:15:39Z</time></p>
 4 | <p>
 5 |   In June 2016, the game development studio
 6 |   <a href="https://facepunch.com/" target="_blank" rel="noopener">Facepunch</a>
 7 |   suffered a data breach that exposed 343k users. The breached data included
 8 |   usernames, email and IP addresses, dates of birth and salted MD5 password
 9 |   hashes. Facepunch advised they were aware of the incident and had notified
10 |   people at the time. The data was provided to HIBP by whitehat security
11 |   researcher and data analyst Adam Davies.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/gogames/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="gogames">Go Games</h1>
 2 | 
 3 | <p><time datetime="2020-01-11T00:06:33Z">2020-01-11T00:06:33Z</time></p>
 4 | <p>
 5 |   In approximately October 2015, the manga website
 6 |   <a href="http://gogames.me" target="_blank" rel="noopener">Go Games</a>
 7 |   suffered a data breach. The exposed data included 3.4M customer records
 8 |   including email and IP addresses, usernames and passwords stored as salted MD5
 9 |   hashes. Go Games did not respond when contacted about the incident. The data
10 |   was provided to HIBP by
11 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
12 |   >.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/indianrailways/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="indianrailways">Indian Railways</h1>
 2 | 
 3 | <p><time datetime="2020-01-10T19:13:39Z">2020-01-10T19:13:39Z</time></p>
 4 | <p>
 5 |   In November 2019,
 6 |   <a
 7 |     href="https://medium.com/dvuln/why-you-should-choo-choo-choose-to-have-a-vulnerability-disclosure-policy-2m-accounts-exposed-7cd7eaec4da5"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the website for Indian Rail left more than 2M records exposed on an
11 |     unprotected Firebase database instance</a
12 |   >. The exposed data included 583k unique email addresses alongside usernames
13 |   and passwords stored in plain text.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/lightshope/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="lightshope">Light&#39;s Hope</h1>
 2 | 
 3 | <p><time datetime="2018-07-04T13:32:01Z">2018-07-04T13:32:01Z</time></p>
 4 | <p>
 5 |   In June 2018, the World of Warcraft service
 6 |   <a
 7 |     href="https://lightshope.org/news/forum-breach-summary-of-investigation-and-final-report"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Light's Hope suffered a data breach</a
11 |   >
12 |   which they subsequently self-submitted to HIBP. Over 30K unique users were
13 |   impacted and their exposed data included email addresses, dates of birth,
14 |   private messages and passwords stored as bcrypt hashes.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/pixelfederation/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="pixelfederation">Pixel Federation</h1>
 2 | 
 3 | <p><time datetime="2013-12-06T00:00:00Z">2013-12-06T00:00:00Z</time></p>
 4 | <p>
 5 |   In December 2013, a
 6 |   <a
 7 |     href="http://www.cyberwarnews.info/2013/12/04/pixel-federation-hacked-38000-user-credentials-leaked"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >breach of the web-based game community based in Slovakia</a
11 |   >
12 |   exposed over 38,000 accounts which were promptly posted online. The breach
13 |   included email addresses and unsalted MD5 hashed passwords, many of which were
14 |   easily converted back to plain text.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/smogon/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="smogon">Smogon</h1>
 2 | 
 3 | <p><time datetime="2018-04-11T00:12:09Z">2018-04-11T00:12:09Z</time></p>
 4 | <p>
 5 |   In April 2018, the Pokémon website known as
 6 |   <a
 7 |     href="https://www.smogon.com/forums/threads/we-were-hacked-recently-you-may-potentially-want-to-change-your-passwords.3632265/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Smogon announced they'd suffered a data breach</a
11 |   >. The breach dated back to September 2017 and affected their XenForo based
12 |   forum. The exposed data included usernames, email addresses, genders and both
13 |   bcrypt and MD5 password hashes.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/victoryphones/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="victoryphones">Victory Phones</h1>
 2 | 
 3 | <p><time datetime="2017-10-11T21:01:33Z">2017-10-11T21:01:33Z</time></p>
 4 | <p>
 5 |   In January 2017, the automated telephony services company
 6 |   <a
 7 |     href="http://www.zdnet.com/article/republican-polling-firm-hacked-exposing-donor-records/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Victory Phones left a Mongo DB database publicly facing without a
11 |     password</a
12 |   >. Subsequently, 213GB of data was downloaded by an unauthorised party
13 |   including names, addresses, phone numbers and over 166k unique email
14 |   addresses.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/aptoide/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="aptoide">Aptoide</h1>
 2 | 
 3 | <p><time datetime="2020-04-19T03:07:42Z">2020-04-19T03:07:42Z</time></p>
 4 | <p>
 5 |   In April 2020, the independent Android app store
 6 |   <a
 7 |     href="https://blog.aptoide.com/aptoide-credentials-information/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Aptoide suffered a data breach</a
11 |   >. The incident resulted in the exposure of 20M customer records which were
12 |   subsequently shared online via a popular hacking forum. Impacted data included
13 |   email and IP addresses, names, IP addresses and passwords stored as SHA-1
14 |   hashes without a salt.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/littlemonsters/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="littlemonsters">Little Monsters</h1>
 2 | 
 3 | <p><time datetime="2017-03-07T20:39:08Z">2017-03-07T20:39:08Z</time></p>
 4 | <p>
 5 |   In approximately January 2017,
 6 |   <a
 7 |     href="https://www.heise.de/security/meldung/Little-Monsters-Nutzerdaten-aus-Lady-Gagas-Social-Network-sollen-geleakt-sein-3646447.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the Lady Gaga fan site known as &quot;Little Monsters&quot; suffered a data
11 |     breach that impacted 1 million accounts</a
12 |   >. The data contained usernames, email addresses, dates of birth and bcrypt
13 |   hashes of passwords.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/moneybookers/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="moneybookers">Money Bookers</h1>
 2 | 
 3 | <p><time datetime="2015-11-30T09:21:55Z">2015-11-30T09:21:55Z</time></p>
 4 | <p>
 5 |   Sometime in 2009, the e-wallet service known as Money Bookers
 6 |   <a
 7 |     href="http://www.forbes.com/sites/thomasbrewster/2015/11/30/paysafe-optimal-neteller-moneybookers-gambling-cyberattacks-data-breach/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >suffered a data breach which exposed almost 4.5M customers</a
11 |   >. Now called Skrill, the breach was not discovered until October 2015 and
12 |   included names, email addresses, home addresses and IP addresses.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/soundwave/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="soundwave">Soundwave</h1>
 2 | 
 3 | <p><time datetime="2017-03-17T22:36:34Z">2017-03-17T22:36:34Z</time></p>
 4 | <p>
 5 |   In approximately mid 2015, the music tracking app
 6 |   <a href="http://www.soundwave.com/help/" target="_blank" rel="noopener"
 7 |     >Soundwave suffered a data breach</a
 8 |   >. The breach stemmed from an incident whereby &quot;production data had been
 9 |   used to populate the test database&quot; and was then inadvertently exposed in
10 |   a MongoDB. The data contained 130k records and included email addresses, dates
11 |   of birth, genders and MD5 hashes of passwords without a salt.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/thecandidboard/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="thecandidboard">The Candid Board</h1>
 2 | 
 3 | <p><time datetime="2017-01-22T08:33:43Z">2017-01-22T08:33:43Z</time></p>
 4 | <p>
 5 |   In September 2015, the non-consensual voyeurism site
 6 |   <a
 7 |     href="http://www.ibtimes.co.uk/upskirt-porn-website-hit-massive-data-leak-exposing-nearly-180000-voyeurs-1602756"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >&quot;The Candid Board&quot; suffered a data breach</a
11 |   >. The hack of the vBulletin forum led to the exposure of over 178k accounts
12 |   along with email and IP addresses, dates of birth and salted passwords hashed
13 |   with MD5.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/warmane/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="warmane">Warmane</h1>
 2 | 
 3 | <p><time datetime="2018-09-08T07:54:18Z">2018-09-08T07:54:18Z</time></p>
 4 | <p>
 5 |   In approximately December 2016, the online service for World of Warcraft
 6 |   private servers
 7 |   <a href="https://www.warmane.com" target="_blank" rel="noopener">Warmane</a>
 8 |   suffered a data breach. The incident exposed over 1.1M accounts including
 9 |   usernames, email addresses, dates of birth and salted MD5 password hashes. The
10 |   data was subsequently extensively circulated online and was later provided to
11 |   HIBP by whitehat security researcher and data analyst Adam Davies.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/aerserv/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="aerserv">AerServ</h1>
 2 | 
 3 | <p><time datetime="2018-12-06T02:58:12Z">2018-12-06T02:58:12Z</time></p>
 4 | <p>
 5 |   In April 2018, the ad management platform known as
 6 |   <a href="https://www.aerserv.com/" target="_blank" rel="noopener">AerServ</a>
 7 |   suffered a data breach. Acquired by InMobi earlier in the year, the AerServ
 8 |   breach impacted over 66k unique email addresses and also included contact
 9 |   information and passwords stored as salted SHA-512 hashes. The data was
10 |   publicly posted to Twitter later in 2018 after which InMobi was notified and
11 |   advised they were aware of the incident.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/parapa/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="parapa">Пара Па</h1>
 2 | 
 3 | <p><time datetime="2016-12-28T07:03:17Z">2016-12-28T07:03:17Z</time></p>
 4 | <p>
 5 |   In August 2016,
 6 |   <a
 7 |     href="http://www.zdnet.com/article/over-25-million-accounts-stolen-after-mail-ru-forums-raided-by-hackers/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the Russian gaming site known as Пара Па (or parapa.mail.ru) was hacked</a
11 |   >
12 |   along with a number of other forums on the Russian mail provider, mail.ru. The
13 |   vBulletin forum contained 4.9 million accounts including usernames, email
14 |   addresses and passwords stored as salted MD5 hashes.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/reverb-nation/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="reverb-nation">ReverbNation</h1>
 2 | 
 3 | <p><time datetime="2017-10-05T06:56:23Z">2017-10-05T06:56:23Z</time></p>
 4 | <p>
 5 |   In January 2014, the online service for assisting musicians to build their
 6 |   careers
 7 |   <a
 8 |     href="https://www.scmagazine.com/2014-breach-prompts-reverbnation-to-notify-customers/article/532492/"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >ReverbNation suffered a data breach which wasn't identified until September
12 |     the following year</a
13 |   >. The breach contained over 7 million accounts with unique email addresses
14 |   and salted SHA1 passwords.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/ulmon/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="ulmon">Ulmon</h1>
 2 | 
 3 | <p><time datetime="2020-05-08T02:10:50Z">2020-05-08T02:10:50Z</time></p>
 4 | <p>
 5 |   In January 2020, the travel app creator
 6 |   <a
 7 |     href="https://www.ulmon.com/blogging/2020/5/4/information-on-ulmon-user-account-data-breach"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Ulmon suffered a data breach</a
11 |   >. The service had almost 1.3M records with 777k unique email addresses,
12 |   names, passwords stored as bcrypt hashes and in some cases, social media
13 |   profile IDs, telephone numbers and bios. The data was subsequently posted to a
14 |   popular hacking forum.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/weheartit/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="weheartit">We Heart It</h1>
 2 | 
 3 | <p><time datetime="2017-10-14T20:14:58Z">2017-10-14T20:14:58Z</time></p>
 4 | <p>
 5 |   In November 2013, the image-based social network
 6 |   <a
 7 |     href="http://help.weheartit.com/customer/portal/articles/2889018"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >We Heart It suffered a data breach</a
11 |   >. The incident wasn't discovered until October 2017 when 8.6 million user
12 |   records were sent to HIBP. The data contained user names, email addresses and
13 |   password hashes, 80% of which were salted SHA-256 with the remainder being MD5
14 |   with no salt.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/businessacumen/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="businessacumen">Business Acumen Magazine</h1>
 2 | 
 3 | <p><time datetime="2014-05-11T04:25:48Z">2014-05-11T04:25:48Z</time></p>
 4 | <p>
 5 |   In April 2014, the Australian "Business Acumen Magazine" website was
 6 |   <a
 7 |     href="http://1337mir.com/cracked/2014/04/businessacumen-biz-hacked-26000-user-password-leaked/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >hacked by an attacker known as 1337MiR</a
11 |   >. The breach resulted in over 26,000 accounts being exposed including
12 |   usernames, email addresses and password stored with a weak cryptographic
13 |   hashing algorithm (MD5 with no salt).
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/daniweb/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="daniweb">DaniWeb</h1>
 2 | 
 3 | <p><time datetime="2016-12-28T23:12:16Z">2016-12-28T23:12:16Z</time></p>
 4 | <p>
 5 |   In late 2015, the technology and social site
 6 |   <a href="https://www.daniweb.com" target="_blank" rel="noopener">DaniWeb</a>
 7 |   suffered a data breach. The attack resulted in the disclosure of 1.1 million
 8 |   accounts including email and IP addresses which were also accompanied by
 9 |   salted MD5 hashes of passwords. However, DaniWeb have advised that &quot;the
10 |   breached password hashes and salts are incorrect&quot; and that they have
11 |   since switched to new infrastructure and software.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/hthstudios/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="hthstudios">HTH Studios</h1>
 2 | 
 3 | <p><time datetime="2018-11-20T21:22:09Z">2018-11-20T21:22:09Z</time></p>
 4 | <p>
 5 |   In August 2018, the adult furry interactive game creator
 6 |   <a href="https://hthstudios.com/" target="_blank" rel="noopener"
 7 |     >HTH Studios</a
 8 |   >
 9 |   suffered a data breach impacting multiple repositories of customer data.
10 |   Several months later, the data surfaced on a popular hacking forum and
11 |   included 411k unique email addresses along with physical and IP addresses,
12 |   names, orders, salted SHA-1 and salted MD5 hashes. HTH Studios is aware of the
13 |   incident.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/mindjolt/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="mindjolt">MindJolt</h1>
 2 | 
 3 | <p><time datetime="2019-07-13T19:21:12Z">2019-07-13T19:21:12Z</time></p>
 4 | <p>
 5 |   In March 2019, the online gaming website
 6 |   <a
 7 |     href="https://www.zdnet.com/article/a-hacker-has-dumped-nearly-one-billion-user-records-over-the-past-two-months/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >MindJolt suffered a data breach that exposed 28M unique email addresses</a
11 |   >. Also impacted were names and dates of birth, but no passwords. The data was
12 |   provided to HIBP by a source who requested it be attributed to
13 |   &quot;JimScott.Sec@protonmail.com&quot;.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/quidd/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="quidd">Quidd</h1>
 2 | 
 3 | <p><time datetime="2020-06-24T11:05:34Z">2020-06-24T11:05:34Z</time></p>
 4 | <p>
 5 |   In 2019, online marketplace for trading stickers, cards, toys, and other
 6 |   collectibles
 7 |   <a
 8 |     href="https://www.zdnet.com/article/account-details-for-4-million-quidd-users-shared-on-hacking-forum/"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >Quidd suffered a data breach</a
12 |   >. The breach exposed almost 4 million users' email addresses, usernames and
13 |   passwords stored as bcrypt hashes. The data was subsequently sold then
14 |   redistributed extensively via hacking forums.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/vodafone/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="vodafone">Vodafone</h1>
 2 | 
 3 | <p><time datetime="2013-11-30T00:00:00Z">2013-11-30T00:00:00Z</time></p>
 4 | <p>
 5 |   In November 2013,
 6 |   <a
 7 |     href="http://thehackernews.com/2013/11/vodafone-iceland-hacked-and-exposed.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Vodafone in Iceland suffered an attack</a
11 |   >
12 |   attributed to the Turkish hacker collective &quot;Maxn3y&quot;. The data was
13 |   consequently publicly exposed and included user names, email addresses, social
14 |   security numbers, SMS message, server logs and passwords from a variety of
15 |   different internal sources.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/ipmart/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="ipmart">iPmart</h1>
 2 | 
 3 | <p><time datetime="2016-02-23T10:13:22Z">2016-02-23T10:13:22Z</time></p>
 4 | <p>
 5 |   During 2015, the
 6 |   <a href="http://ipmart-forum.com" target="_blank" rel="noopener"
 7 |     >iPmart forum</a
 8 |   >
 9 |   (now known as Mobi NUKE) was hacked and over 2 million forum members' details
10 |   were exposed. The vBulletin forum included IP addresses, birth dates and
11 |   passwords stored as salted hashes using a weak implementation enabling many to
12 |   be rapidly cracked. A further 368k accounts were added to &quot;Have I Been
13 |   Pwned&quot; in March 2016 bringing the total to over 2.4M.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/mcbans/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="mcbans">MCBans</h1>
 2 | 
 3 | <p><time datetime="2017-07-23T05:34:55Z">2017-07-23T05:34:55Z</time></p>
 4 | <p>
 5 |   In October 2016, the Minecraft banning service known as
 6 |   <a href="https://www.mcbans.com/" target="_blank" rel="noopener">MCBans</a>
 7 |   suffered a data breach resulting in the exposure of 120k unique user records.
 8 |   The data contained email and IP addresses, usernames and password hashes of
 9 |   unknown format. The site was previously reported as compromised on the
10 |   <a href="https://vigilante.pw/" target="_blank" rel="noopener"
11 |     >Vigilante.pw</a
12 |   >
13 |   breached database directory.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/rbxrocks/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="rbxrocks">Rbx.Rocks</h1>
 2 | 
 3 | <p><time datetime="2018-11-07T13:26:42Z">2018-11-07T13:26:42Z</time></p>
 4 | <p>
 5 |   In August 2018, the Roblox trading site
 6 |   <a href="https://rbx.rocks/" target="_blank" rel="noopener">Rbx.Rocks</a>
 7 |   suffered a data breach. Almost 25k records were sent to HIBP in November and
 8 |   included names, email addresses and passwords stored as bcrypt hashes. In July
 9 |   2019, a further 125k records emerged bringing the total size of the incident
10 |   to 150k. The website has since gone offline with a message stating that
11 |   &quot;Rbx.Rocks v2.0 is currently under construction&quot;.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/snail/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="snail">Snail</h1>
 2 | 
 3 | <p><time datetime="2019-07-27T16:24:09Z">2019-07-27T16:24:09Z</time></p>
 4 | <p>
 5 |   In March 2015, the gaming website
 6 |   <a
 7 |     href="https://www.technadu.com/emuparadise-1-1-million-user-data-breach/70025/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Snail suffered a data breach</a
11 |   >
12 |   that impacted 1.4 million subscribers. The impacted data included usernames,
13 |   IP and email addresses and passwords stored as unsalted MD5 hashes. The data
14 |   was provided to HIBP by
15 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
16 |   >.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/blackspigotmc/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="blackspigotmc">BlackSpigotMC</h1>
 2 | 
 3 | <p><time datetime="2019-07-17T18:44:17Z">2019-07-17T18:44:17Z</time></p>
 4 | <p>
 5 |   In July 2019, the hacking website
 6 |   <a href="https://blackspigot.com/" target="_blank" rel="noopener"
 7 |     >BlackSpigotMC suffered a data breach</a
 8 |   >. The XenForo forum based site was allegedly compromised by a rival hacking
 9 |   website and resulted in 8.5GB of data being leaked including the database and
10 |   website itself. The exposed data included 140k unique email addresses,
11 |   usernames, IP addresses, genders, geographic locations and passwords stored as
12 |   bcrypt hashes.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/freshmenu/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="freshmenu">FreshMenu</h1>
 2 | 
 3 | <p><time datetime="2018-09-10T12:27:19Z">2018-09-10T12:27:19Z</time></p>
 4 | <p>
 5 |   In July 2016, the India-based food delivery service
 6 |   <a href="https://www.freshmenu.com/" target="_blank" rel="noopener"
 7 |     >FreshMenu</a
 8 |   >
 9 |   suffered a data breach. The incident exposed the personal data of over 110k
10 |   customers and included their names, email addresses, phone numbers, home
11 |   addresses and order histories. When advised of the incident, FreshMenu
12 |   acknowledged being already aware of the breach but stated they had decided not
13 |   to notify impacted customers.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/jobandtalent/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="jobandtalent">Jobandtalent</h1>
 2 | 
 3 | <p><time datetime="2021-01-17T22:31:00Z">2021-01-17T22:31:00Z</time></p>
 4 | <p>
 5 |   In approximately February 2018,
 6 |   <a
 7 |     href="https://www.zdnet.com/article/hacker-puts-up-for-sale-third-round-of-hacked-databases-on-the-dark-web/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the employment website Jobandtalent suffered a data breach which then
11 |     appeared for sale alongside other breaches a year later</a
12 |   >. The incident impacted 11 million subscribers and exposed their names, email
13 |   and IP addresses and passwords stored as salted SHA-1 hashes.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/mrexcel/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="mrexcel">MrExcel</h1>
 2 | 
 3 | <p><time datetime="2017-01-22T07:39:17Z">2017-01-22T07:39:17Z</time></p>
 4 | <p>
 5 |   In December 2016, the forum for the Microsoft Excel tips and solutions site
 6 |   <a
 7 |     href="http://www.mrexcel.com/details-of-data-breach-at-mrexcel-com/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Mr Excel suffered a data breach</a
11 |   >. The hack of the vBulletin forum led to the exposure of over 366k accounts
12 |   along with email and IP addresses, dates of birth and salted passwords hashed
13 |   with MD5. The owner of the MrExcel forum subsequently self-submitted the data
14 |   to HIBP.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/nexusmods/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="nexusmods">Nexus Mods</h1>
 2 | 
 3 | <p><time datetime="2016-01-17T17:18:47Z">2016-01-17T17:18:47Z</time></p>
 4 | <p>
 5 |   In December 2015, the game modding site Nexus Mods
 6 |   <a
 7 |     href="http://www.nexusmods.com/games/news/12670/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >released a statement notifying users that they had been hacked</a
11 |   >. They subsequently dated the hack as having occurred in July 2013 although
12 |   there is evidence to suggest the data was being traded months in advance of
13 |   that. The breach contained usernames, email addresses and passwords stored as
14 |   a salted hashes.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/poshmark/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="poshmark">Poshmark</h1>
 2 | 
 3 | <p><time datetime="2019-09-02T03:36:05Z">2019-09-02T03:36:05Z</time></p>
 4 | <p>
 5 |   In mid-2018, social commerce marketplace
 6 |   <a
 7 |     href="https://techcrunch.com/2019/08/01/poshmark-confirms-data-breach/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Poshmark suffered a data breach</a
11 |   >
12 |   that exposed 36M user accounts. The compromised data included email addresses,
13 |   names, usernames, genders, locations and passwords stored as bcrypt hashes.
14 |   The data was provided to HIBP by a source who requested it be attributed to
15 |   "JimScott.Sec@protonmail.com".
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/quantumbooter/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="quantumbooter">Quantum Booter</h1>
 2 | 
 3 | <p><time datetime="2015-04-04T06:40:05Z">2015-04-04T06:40:05Z</time></p>
 4 | <p>
 5 |   In March 2014, the
 6 |   <a href="http://www.webopedia.com/TERM/B/booter_services.html"
 7 |     >booter service</a
 8 |   >
 9 |   Quantum Booter (also referred to as Quantum Stresser) suffered a breach which
10 |   lead to the disclosure of their internal database. The leaked data included
11 |   private discussions relating to malicious activity Quantum Booter users were
12 |   performing against online adversaries, including the IP addresses of those
13 |   using the service to mount DDoS attacks.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/vins/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="vins">Exposed VINs</h1>
 2 | 
 3 | <p><time datetime="2017-06-09T05:35:19Z">2017-06-09T05:35:19Z</time></p>
 4 | <p>
 5 |   In June 2017,
 6 |   <a
 7 |     href="https://www.bleepingcomputer.com/news/security/car-thieves-everywhere-rejoice-as-unsecured-database-exposes-10-million-car-vins/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >an unsecured database with more than 10 million VINs (vehicle
11 |     identification numbers) was discovered by researchers</a
12 |   >. Believed to be sourced from US car dealerships, the data included a raft of
13 |   personal information and vehicle data along with 397k unique email addresses.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/chegg/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="chegg">Chegg</h1>
 2 | 
 3 | <p><time datetime="2019-08-16T07:24:58Z">2019-08-16T07:24:58Z</time></p>
 4 | <p>
 5 |   In April 2018, the textbook rental service
 6 |   <a
 7 |     href="https://techcrunch.com/2018/09/26/chegg-resets-40-million-user-passwords-after-data-breach/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Chegg suffered a data breach</a
11 |   >
12 |   that impacted 40 million subscribers. The exposed data included email
13 |   addresses, usernames, names and passwords stored as unsalted MD5 hashes. The
14 |   data was provided to HIBP by a source who requested it be attributed to
15 |   "JimScott.Sec@protonmail.com".
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/crossfire/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="crossfire">Cross Fire</h1>
 2 | 
 3 | <p><time datetime="2016-12-28T00:29:28Z">2016-12-28T00:29:28Z</time></p>
 4 | <p>
 5 |   In August 2016,
 6 |   <a
 7 |     href="http://www.zdnet.com/article/over-25-million-accounts-stolen-after-mail-ru-forums-raided-by-hackers/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the Russian gaming forum known as Cross Fire (or cfire.mail.ru) was
11 |     hacked</a
12 |   >
13 |   along with a number of other forums on the Russian mail provider, mail.ru. The
14 |   vBulletin forum contained 12.8 million accounts including usernames, email
15 |   addresses and passwords stored as salted MD5 hashes.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/petflow/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="petflow">PetFlow</h1>
 2 | 
 3 | <p><time datetime="2020-05-26T02:48:24Z">2020-05-26T02:48:24Z</time></p>
 4 | <p>
 5 |   In December 2017, the pet care delivery service
 6 |   <a
 7 |     href="https://techcrunch.com/2019/02/14/hacker-strikes-again/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >PetFlow suffered a data breach which consequently appeared for sale on a
11 |     dark web marketplace</a
12 |   >. Almost 1M accounts were impacted and exposed email addresses and passwords
13 |   stored as unsalted MD5 hashes. The data was provided to HIBP by a source who
14 |   requested it be attributed to &quot;nano@databases.pw&quot;.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/animeplanet/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="animeplanet">Anime-Planet</h1>
 2 | 
 3 | <p><time datetime="2019-07-28T00:35:07Z">2019-07-28T00:35:07Z</time></p>
 4 | <p>
 5 |   In approximately 2016, the anime website
 6 |   <a href="https://www.anime-planet.com/" target="_blank" rel="noopener"
 7 |     >Anime-Planet</a
 8 |   >
 9 |   suffered a data breach that impacted 369k subscribers. The exposed data
10 |   included usernames, IP and email addresses, dates of birth and passwords
11 |   stored as unsalted MD5 hashes and for newer accounts, bcrypt hashes. The data
12 |   was provided to HIBP by
13 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
14 |   >.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/biohackme/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="biohackme">Biohack.me</h1>
 2 | 
 3 | <p><time datetime="2017-08-23T20:47:39Z">2017-08-23T20:47:39Z</time></p>
 4 | <p>
 5 |   In December 2016, the forum for the biohacking website
 6 |   <a
 7 |     href="https://forum.biohack.me/index.php?p=/discussion/2101/critical-website-server-compromised-read-this-action-needed"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Biohack.me suffered a data breach</a
11 |   >
12 |   that exposed 3.4k accounts. The data included usernames, email addresses and
13 |   hashed passwords along with the private messages of forum members. The data
14 |   was self-submitted to HIBP by the Biohack.me operators.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/lanwar/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="lanwar">Lanwar</h1>
 2 | 
 3 | <p><time datetime="2018-08-08T02:57:06Z">2018-08-08T02:57:06Z</time></p>
 4 | <p>
 5 |   In July 2018, staff of
 6 |   <a href="https://lanwar.com/" target="_blank" rel="noopener"
 7 |     >the Lanwar gaming site</a
 8 |   >
 9 |   discovered a data breach they believe dates back to sometime over the previous
10 |   several months. The data contained 45k names, email addresses, usernames and
11 |   plain text passwords. A Lanwar staff member self-submitted the breach to HIBP
12 |   and has also contacted the relevant authorities about the incident after
13 |   identifying a phishing attempt to extort Bitcoin from a user.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/playgar/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="playgar">Guns and Robots</h1>
 2 | 
 3 | <p><time datetime="2018-02-14T22:32:25Z">2018-02-14T22:32:25Z</time></p>
 4 | <p>
 5 |   In approximately April 2016, the gaming website
 6 |   <a href="https://www.play-gar.com/" target="_blank" rel="noopener"
 7 |     >Guns and Robots</a
 8 |   >
 9 |   suffered a data breach resulting in the exposure of 143k unique records. The
10 |   data contained email and IP addresses, usernames and SHA-1 password hashes.
11 |   The site was previously reported as compromised on the
12 |   <a href="https://vigilante.pw/" target="_blank" rel="noopener"
13 |     >Vigilante.pw</a
14 |   >
15 |   breached database directory.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/vbulletin/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="vbulletin">vBulletin</h1>
 2 | 
 3 | <p><time datetime="2016-01-24T13:15:11Z">2016-01-24T13:15:11Z</time></p>
 4 | <p>
 5 |   In November 2015, the forum software maker
 6 |   <a
 7 |     href="http://www.theregister.co.uk/2015/11/03/vbulletin_forum_software_hacked_defaced/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >vBulletin suffered a serious data breach</a
11 |   >. The attack lead to the release of both forum user and customer accounts
12 |   totalling almost 519k records. The breach included email addresses, birth
13 |   dates, security questions and answers for customers and salted hashes of
14 |   passwords for both sources.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/wienerbuchereien/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="wienerbuchereien">Wiener Büchereien</h1>
 2 | 
 3 | <p><time datetime="2019-06-28T07:51:50Z">2019-06-28T07:51:50Z</time></p>
 4 | <p>
 5 |   In June 2019,
 6 |   <a
 7 |     href="https://futurezone.at/digital-life/wiener-buechereien-gehackt-daten-von-77000-nutzern-im-netz/400524190"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the library of Vienna (Wiener Büchereien) suffered a data breach</a
11 |   >. The compromised data included 224k unique email addresses, names, physical
12 |   addresses, phone numbers and dates of birth. The breached data was
13 |   subsequently posted to Twitter by the alleged perpetrator of the breach.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/animoto/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="animoto">Animoto</h1>
 2 | 
 3 | <p><time datetime="2019-07-18T05:04:08Z">2019-07-18T05:04:08Z</time></p>
 4 | <p>
 5 |   In July 2018, the cloud-based video making service
 6 |   <a
 7 |     href="https://techcrunch.com/2018/08/20/animoto-hack-exposes-personal-information-geolocation-data/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Animoto suffered a data breach</a
11 |   >. The breach exposed 22 million unique email addresses alongside names, dates
12 |   of birth, country of origin and salted password hashes. The data was provided
13 |   to HIBP by a source who requested it be attributed to
14 |   &quot;JimScott.Sec@protonmail.com&quot;.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/forbes/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="forbes">Forbes</h1>
 2 | 
 3 | <p><time datetime="2014-02-15T11:24:42Z">2014-02-15T11:24:42Z</time></p>
 4 | <p>
 5 |   In February 2014, the Forbes website
 6 |   <a
 7 |     href="http://news.cnet.com/8301-1009_3-57618945-83/syrian-electronic-army-hacks-forbes-steals-user-data"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >succumbed to an attack that leaked over 1 million user accounts</a
11 |   >. The attack was attributed to the Syrian Electronic Army, allegedly as
12 |   retribution for a perceived "Hate of Syria". The attack not only leaked user
13 |   credentials, but also resulted in the posting of fake news stories to
14 |   forbes.com.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/lizardsquad/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="lizardsquad">Lizard Squad</h1>
 2 | 
 3 | <p><time datetime="2015-01-18T01:24:24Z">2015-01-18T01:24:24Z</time></p>
 4 | <p>
 5 |   In January 2015, the hacker collective known as &quot;Lizard Squad&quot;
 6 |   created a DDoS service by the name of &quot;Lizard Stresser&quot; which could
 7 |   be procured to mount attacks against online targets. Shortly thereafter, the
 8 |   service
 9 |   <a
10 |     href="https://krebsonsecurity.com/2015/01/another-lizard-arrested-lizard-lair-hacked/"
11 |     >suffered a data breach</a
12 |   >
13 |   which resulted in the public disclosure of over 13k user accounts including
14 |   passwords stored in plain text.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/thishabboforum/index.html:
--------------------------------------------------------------------------------
1 | 
2 | <h1 id="thishabboforum">ThisHabbo Forum</h1>
3 | 
4 | <p><time datetime="2015-03-28T05:35:28Z">2015-03-28T05:35:28Z</time></p>
5 | <p>In 2014, the ThisHabbo forum (a fan site for Habbo.com, a Finnish social networking site) <a href="https://www.google.com/search?q="thishabbo_forum.txt" target="_blank" rel="noopener">appeared among a list of compromised sites</a> which has subsequently been removed from the internet. Whilst the actual date of the exploit is not clear, the breached data includes usernames, email addresses, IP addresses and salted hashes of passwords. A further 584k records were added from a more comprehensive breach file provided in October 2016.</p>
6 | 


--------------------------------------------------------------------------------
/www/hibp/yatra/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="yatra">Yatra</h1>
 2 | 
 3 | <p><time datetime="2018-07-04T23:15:57Z">2018-07-04T23:15:57Z</time></p>
 4 | <p>
 5 |   In September 2013, the Indian bookings website known as
 6 |   <a href="https://www.yatra.com/" target="_blank" rel="noopener">Yatra</a> had
 7 |   5 million records exposed in a data breach. The data contained email and
 8 |   physical addresses, dates of birth and phone numbers along with both PINs and
 9 |   passwords stored in plain text. The site was previously reported as
10 |   compromised on the
11 |   <a href="https://vigilante.pw/" target="_blank" rel="noopener"
12 |     >Vigilante.pw</a
13 |   >
14 |   breached database directory.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/zynga/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="zynga">Zynga</h1>
 2 | 
 3 | <p><time datetime="2019-12-19T04:54:45Z">2019-12-19T04:54:45Z</time></p>
 4 | <p>
 5 |   In September 2019, game developer
 6 |   <a
 7 |     href="https://www.cnet.com/news/words-with-friends-hack-reportedly-exposes-data-of-more-than-200m-players/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Zynga (the creator of Words with Friends) suffered a data breach</a
11 |   >. The incident exposed 173M unique email addresses alongside usernames and
12 |   passwords stored as salted SHA-1 hashes. The data was provided to HIBP by
13 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
14 |   >.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/bolt/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="bolt">Bolt</h1>
 2 | 
 3 | <p><time datetime="2017-11-24T08:15:24Z">2017-11-24T08:15:24Z</time></p>
 4 | <p>
 5 |   In approximately March 2017, the file sharing website
 6 |   <a href="http://bolt.cd/" target="_blank" rel="noopener">Bolt</a> suffered a
 7 |   data breach resulting in the exposure of 995k unique user records. The data
 8 |   was sourced from their vBulletin forum and contained email and IP addresses,
 9 |   usernames and salted MD5 password hashes. The site was previously reported as
10 |   compromised on the
11 |   <a href="https://vigilante.pw/" target="_blank" rel="noopener"
12 |     >Vigilante.pw</a
13 |   >
14 |   breached database directory.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/cashcrate/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="cashcrate">CashCrate</h1>
 2 | 
 3 | <p><time datetime="2018-04-20T21:40:38Z">2018-04-20T21:40:38Z</time></p>
 4 | <p>
 5 |   In June 2017, news broke that
 6 |   <a
 7 |     href="https://motherboard.vice.com/en_us/article/bj8pvq/hackers-steal-6-million-user-accounts-for-cash-for-surveys-site"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >CashCrate had suffered a data breach exposing 6.8 million records</a
11 |   >. The breach of the cash-for-surveys site dated back to November 2016 and
12 |   exposed names, physical addresses, email addresses and passwords stored in
13 |   plain text for older accounts along with weak MD5 hashes for newer ones.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/gaadi/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="gaadi">Gaadi</h1>
 2 | 
 3 | <p><time datetime="2018-07-01T07:17:02Z">2018-07-01T07:17:02Z</time></p>
 4 | <p>
 5 |   In May 2015, the Indian motoring website known as
 6 |   <a href="https://www.gaadi.com/" target="_blank" rel="noopener">Gaadi</a> had
 7 |   4.3 million records exposed in a data breach. The data contained usernames,
 8 |   email and IP addresses, genders, the city of users as well as passwords stored
 9 |   in both plain text and as MD5 hashes. The site was previously reported as
10 |   compromised on the
11 |   <a href="https://vigilante.pw/" target="_blank" rel="noopener"
12 |     >Vigilante.pw</a
13 |   >
14 |   breached database directory.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/rosebuttboard/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="rosebuttboard">Rosebutt Board</h1>
 2 | 
 3 | <p><time datetime="2016-05-10T07:37:46Z">2016-05-10T07:37:46Z</time></p>
 4 | <p>
 5 |   Some time prior to May 2016,
 6 |   <a
 7 |     href="https://motherboard.vice.com/read/rosebuttboard-ip-board"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the forum known as &quot;Rosebutt Board&quot; was hacked</a
11 |   >
12 |   and 107k accounts were exposed. The self-described &quot;top one board for
13 |   anal fisting, prolapse, huge insertions and rosebutt fans&quot; had email and
14 |   IP addresses, usernames and weakly stored salted MD5 password hashes hacked
15 |   from the IP.Board based forum.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/socialengineered/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="socialengineered">Social Engineered</h1>
 2 | 
 3 | <p><time datetime="2019-06-23T20:46:39Z">2019-06-23T20:46:39Z</time></p>
 4 | <p>
 5 |   In June 2019, the &quot;Art of Human Hacking&quot; site
 6 |   <a href="https://socialengineered.net" target="_blank" rel="noopener"
 7 |     >Social Engineered</a
 8 |   >
 9 |   suffered a data breach. The breach of the MyBB forum was published on a rival
10 |   hacking forum and included 89k unique email addresses spread across 55k forum
11 |   users and other tables in the database. The exposed data also included
12 |   usernames, IP addresses, private messages and passwords stored as salted MD5
13 |   hashes.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/artsy/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="artsy">Artsy</h1>
 2 | 
 3 | <p><time datetime="2020-05-25T20:59:10Z">2020-05-25T20:59:10Z</time></p>
 4 | <p>
 5 |   In April 2018, the online arts database
 6 |   <a
 7 |     href="https://www.theregister.co.uk/2019/02/11/620_million_hacked_accounts_dark_web/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Artsy suffered a data breach which consequently appeared for sale on a dark
11 |     web marketplace</a
12 |   >. Over 1M accounts were impacted and included IP and email addresses, names
13 |   and passwords stored as salted SHA-512 hashes. The data was provided to HIBP
14 |   by a source who requested it be attributed to &quot;nano@databases.pw&quot;.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/battlefieldheroes/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="battlefieldheroes">Battlefield Heroes</h1>
 2 | 
 3 | <p><time datetime="2014-01-23T13:10:29Z">2014-01-23T13:10:29Z</time></p>
 4 | <p>
 5 |   In June 2011 as part of a final breached data dump, the hacker collective
 6 |   &quot;LulzSec&quot;
 7 |   <a
 8 |     href="http://www.rockpapershotgun.com/2011/06/26/lulzsec-over-release-battlefield-heroes-data"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >obtained and released over half a million usernames and passwords from the
12 |     game Battlefield Heroes</a
13 |   >. The passwords were stored as MD5 hashes with no salt and many were easily
14 |   converted back to their plain text versions.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/funnygames/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="funnygames">Funny Games</h1>
 2 | 
 3 | <p><time datetime="2018-07-24T03:01:35Z">2018-07-24T03:01:35Z</time></p>
 4 | <p>
 5 |   In April 2018, the online entertainment site
 6 |   <a href="https://www.funny-games.biz/" target="_blank" rel="noopener"
 7 |     >Funny Games</a
 8 |   >
 9 |   suffered a data breach that disclosed 764k records including usernames, email
10 |   and IP addresses and salted MD5 password hashes. The incident was disclosed to
11 |   Funny Games in July who acknowledged the breach and identified it had been
12 |   caused by legacy code no longer in use. The record count in the breach
13 |   constitute approximately half of the user base.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/lifeboat/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="lifeboat">Lifeboat</h1>
 2 | 
 3 | <p><time datetime="2016-04-25T21:51:50Z">2016-04-25T21:51:50Z</time></p>
 4 | <p>
 5 |   In January 2016, the Minecraft community known as Lifeboat
 6 |   <a
 7 |     href="https://motherboard.vice.com/read/another-day-another-hack-7-million-emails-and-hashed-passwords-for-minecraft"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >was hacked and more than 7 million accounts leaked</a
11 |   >. Lifeboat knew of the incident for three months before the breach was made
12 |   public but elected not to advise customers. The leaked data included
13 |   usernames, email addresses and passwords stored as straight MD5 hashes.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/powerbot/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="powerbot">Powerbot</h1>
 2 | 
 3 | <p><time datetime="2017-07-01T16:12:37Z">2017-07-01T16:12:37Z</time></p>
 4 | <p>
 5 |   In approximately September 2014, the RuneScape bot website
 6 |   <a href="https://www.powerbot.org" target="_blank" rel="noopener">Powerbot</a>
 7 |   suffered a data breach resulting in the exposure of over half a million unique
 8 |   user records. The data contained email and IP addresses, usernames and salted
 9 |   MD5 hashes of passwords. The site was previously reported as compromised on
10 |   the
11 |   <a href="https://vigilante.pw/" target="_blank" rel="noopener"
12 |     >Vigilante.pw</a
13 |   >
14 |   breached database directory.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/roll20/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="roll20">Roll20</h1>
 2 | 
 3 | <p><time datetime="2019-07-19T14:26:05Z">2019-07-19T14:26:05Z</time></p>
 4 | <p>
 5 |   In December 2018, the tabletop role-playing games website
 6 |   <a
 7 |     href="https://app.roll20.net/forum/post/7209691/roll20-security-breach"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Roll20 suffered a data breach</a
11 |   >. Almost 4 million customers were impacted by the breach and had email and IP
12 |   addresses, names, bcrypt hashes of passwords and the last 4 digits of credit
13 |   cards exposed. The data was provided to HIBP by a source who requested it be
14 |   attributed to &quot;JimScott.Sec@protonmail.com&quot;.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/eyeem/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="eyeem">EyeEm</h1>
 2 | 
 3 | <p><time datetime="2019-02-16T07:17:45Z">2019-02-16T07:17:45Z</time></p>
 4 | <p>
 5 |   In February 2018,
 6 |   <a
 7 |     href="https://www.theregister.co.uk/2019/02/11/620_million_hacked_accounts_dark_web/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >photography website EyeEm suffered a data breach</a
11 |   >. The breach was identified among a collection of other large incidents and
12 |   exposed almost 20M unique email addresses, names, usernames, bios and password
13 |   hashes. The data was provided to HIBP by a source who asked for it to be
14 |   attributed to &quot;Kuroi'sh or Gabriel Kimiaie-Asadi Bildstein&quot;.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/heroesofnewerth/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="heroesofnewerth">Heroes of Newerth</h1>
 2 | 
 3 | <p><time datetime="2016-01-24T16:27:23Z">2016-01-24T16:27:23Z</time></p>
 4 | <p>
 5 |   In December 2012, the multiplayer online battle arena game known as
 6 |   <a href="http://www.heroesofnewerth.com/" target="_blank" rel="noopener"
 7 |     >Heroes of Newerth</a
 8 |   >
 9 |   <a
10 |     href="https://www.reddit.com/r/HeroesofNewerth/comments/14zj2p/i_am_the_guy_who_hacked_hon/"
11 |     target="_blank"
12 |     rel="noopener"
13 |   >
14 |     was hacked</a
15 |   >
16 |   and over 8 million accounts extracted from the system. The compromised data
17 |   included usernames, email addresses and passwords.
18 | </p>
19 | 


--------------------------------------------------------------------------------
/www/hibp/mate1/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="mate1">Mate1.com</h1>
 2 | 
 3 | <p><time datetime="2016-04-14T23:37:15Z">2016-04-14T23:37:15Z</time></p>
 4 | <p>
 5 |   In February 2016, the dating site
 6 |   <a
 7 |     href="http://motherboard.vice.com/read/hacker-claims-to-have-sold-27m-dating-site-passwords-mate1-com-hell-forum"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >mate1.com suffered a huge data breach</a
11 |   >
12 |   resulting in the disclosure of over 27 million subscribers' information. The
13 |   data included deeply personal information about their private lives including
14 |   drug and alcohol habits, incomes levels and sexual fetishes as well as
15 |   passwords stored in plain text.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/toondoo/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="toondoo">ToonDoo</h1>
 2 | 
 3 | <p><time datetime="2019-11-11T06:19:53Z">2019-11-11T06:19:53Z</time></p>
 4 | <p>
 5 |   In August 2019, the comic strip creation website
 6 |   <a
 7 |     href="https://www.zataz.com/6-000-000-de-donnees-personnelles-piratees-pour-le-site-toondoo/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >ToonDoo suffered a data breach</a
11 |   >. The data was subsequently redistributed on a popular hacking forum in
12 |   November where the personal information of over 6M subscribers was shared.
13 |   Impacted data included email and IP addresses, usernames, genders, the
14 |   location of the individual and salted password hashes.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/bitcointalk/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="bitcointalk">Bitcoin Talk</h1>
 2 | 
 3 | <p><time datetime="2017-03-27T23:45:41Z">2017-03-27T23:45:41Z</time></p>
 4 | <p>
 5 |   In May 2015, the Bitcoin forum
 6 |   <a
 7 |     href="https://www.cryptocoinsnews.com/bitcoin-exchange-btc-e-bitcointalk-forum-breaches-details-revealed/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Bitcoin Talk was hacked</a
11 |   >
12 |   and over 500k unique email addresses were exposed. The attack led to the
13 |   exposure of a raft of personal data including usernames, email and IP
14 |   addresses, genders, birth dates, security questions and MD5 hashes of their
15 |   answers plus hashes of the passwords themselves.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/fling/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="fling">Fling</h1>
 2 | 
 3 | <p><time datetime="2016-05-28T23:08:07Z">2016-05-28T23:08:07Z</time></p>
 4 | <p>
 5 |   In 2011, the self-proclaimed &quot;World's Best Adult Social Network&quot;
 6 |   website known as Fling
 7 |   <a
 8 |     href="http://motherboard.vice.com/read/another-day-another-hack-passwords-and-sexual-desires-for-dating-site-fling"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >was hacked and more than 40 million accounts obtained by the attacker</a
12 |   >. The breached data included highly sensitive personal attributes such as
13 |   sexual orientation and sexual interests as well as email addresses and
14 |   passwords stored in plain text.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/foodora/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="foodora">Foodora</h1>
 2 | 
 3 | <p><time datetime="2020-06-16T02:09:33Z">2020-06-16T02:09:33Z</time></p>
 4 | <p>
 5 |   In April 2016, the online food delivery service
 6 |   <a
 7 |     href="https://www.databreachtoday.com/delivery-hero-confirms-foodora-data-breach-a-14435"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Foodora suffered a data breach</a
11 |   >
12 |   which was then extensively redistributed online. The breach included the
13 |   personal information of hundreds of thousands of customers from multiple
14 |   countries including their names, delivery addresses, phone numbers and
15 |   passwords stored as either a salted MD5 or a bcrypt hash.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/lazada/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="lazada">Lazada RedMart</h1>
 2 | 
 3 | <p><time datetime="2020-11-10T00:58:49Z">2020-11-10T00:58:49Z</time></p>
 4 | <p>
 5 |   In October 2020,
 6 |   <a
 7 |     href="https://www.bleepingcomputer.com/news/security/over-1m-lazada-redmart-accounts-sold-online-after-data-breach/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >news broke of Lazada RedMart data breach</a
11 |   >
12 |   containing records as recent as July 2020 and being sold via an online
13 |   marketplace. In all, the data contained 1.1 million customer email addresses
14 |   alongside names, phone numbers, physical addresses, partial credit card
15 |   numbers and passwords stored as SHA-1 hashes.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/linkedin/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="linkedin">LinkedIn</h1>
 2 | 
 3 | <p><time datetime="2016-05-21T21:35:40Z">2016-05-21T21:35:40Z</time></p>
 4 | <p>
 5 |   In May 2016,
 6 |   <a
 7 |     href="https://www.troyhunt.com/observations-and-thoughts-on-the-linkedin-data-breach"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >LinkedIn had 164 million email addresses and passwords exposed</a
11 |   >. Originally hacked in 2012, the data remained out of sight until being
12 |   offered for sale on a dark market site 4 years later. The passwords in the
13 |   breach were stored as SHA1 hashes without salt, the vast majority of which
14 |   were quickly cracked in the days following the release of the data.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/macforums/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="macforums">Mac Forums</h1>
 2 | 
 3 | <p><time datetime="2018-10-29T23:47:44Z">2018-10-29T23:47:44Z</time></p>
 4 | <p>
 5 |   In July 2016, the self-proclaimed &quot;Ultimate Source For Your Mac&quot;
 6 |   website
 7 |   <a href="https://www.mac-forums.com/" target="_blank" rel="noopener"
 8 |     >Mac Forums</a
 9 |   >
10 |   suffered a data breach. The vBulletin-based system exposed over 326k
11 |   usernames, email and IP addresses, dates of birth and passwords stored as
12 |   salted MD5 hashes. The data was later discovered being traded on a popular
13 |   hacking forum. Mac Forums did not respond when contacted about the incident
14 |   via their contact us form.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/naughtyamerica/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="naughtyamerica">Naughty America</h1>
 2 | 
 3 | <p><time datetime="2016-04-24T06:14:42Z">2016-04-24T06:14:42Z</time></p>
 4 | <p>
 5 |   In March 2016, the adult website
 6 |   <a
 7 |     href="http://www.forbes.com/sites/thomasbrewster/2016/04/14/naughty-america-fappening-hacked-porn-sites/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Naughty America was hacked and the data consequently sold online</a
11 |   >. The breach included data from numerous systems with various personal
12 |   identity attributes, the largest of which had passwords stored as easily
13 |   crackable MD5 hashes. There were 1.4 million unique email addresses in the
14 |   breach.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/nitro/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="nitro">Nitro</h1>
 2 | 
 3 | <p><time datetime="2021-01-19T10:45:32Z">2021-01-19T10:45:32Z</time></p>
 4 | <p>
 5 |   In September 2020,
 6 |   <a
 7 |     href="https://www.bleepingcomputer.com/news/security/massive-nitro-data-breach-impacts-microsoft-google-apple-more/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the Nitro PDF service suffered a massive data breach which exposed over 70
11 |     million unique email addresses</a
12 |   >. The breach also exposed names, bcrypt password hashes and the titles of
13 |   converted documents. The data was provided to HIBP by
14 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
15 |   >.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/policeone/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="policeone">PoliceOne</h1>
 2 | 
 3 | <p><time datetime="2017-11-15T07:57:11Z">2017-11-15T07:57:11Z</time></p>
 4 | <p>
 5 |   In February 2017, the law enforcement website
 6 |   <a
 7 |     href="http://www.zdnet.com/article/police-forum-hacked-thousands-of-records-for-sale-on-dark-web/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >PoliceOne confirmed they'd suffered a data breach</a
11 |   >. The breach contained over 700k accounts which appeared for sale by a data
12 |   broker and included email and IP addresses, usernames and salted MD5 password
13 |   hashes. The file the data was contained in indicated the original breach dated
14 |   back to July 2014.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/truefire/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="truefire">TrueFire</h1>
 2 | 
 3 | <p><time datetime="2020-08-02T20:46:26Z">2020-08-02T20:46:26Z</time></p>
 4 | <p>
 5 |   In February 2020, the guitar tuition website
 6 |   <a
 7 |     href="https://guitar.com/news/industry-news/truefire-data-breach/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >TrueFire suffered a data breach</a
11 |   >
12 |   which impacted 600k members. The breach exposed extensive personal information
13 |   including names, email and physical addresses, account balances and unsalted
14 |   MD5 password hashes. The data was provided to HIBP by
15 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
16 |   >.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/vedantu/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="vedantu">Vedantu</h1>
 2 | 
 3 | <p><time datetime="2019-11-01T05:13:40Z">2019-11-01T05:13:40Z</time></p>
 4 | <p>
 5 |   In mid-2019, the Indian interactive online tutoring platform
 6 |   <a href="https://www.vedantu.com/" target="_blank" rel="noopener">Vedantu</a>
 7 |   suffered a data breach which exposed the personal data of 687k users. The JSON
 8 |   formatted database dump exposed extensive personal information including email
 9 |   and IP address, names, phone numbers, genders and passwords stored as bcrypt
10 |   hashes. When contacted about the incident, Vedantu advised that they were
11 |   aware of the breach and were in the process of informing their customers.
12 | </p>
13 | 


--------------------------------------------------------------------------------
/www/hibp/astropid/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="astropid">Astropid</h1>
 2 | 
 3 | <p><time datetime="2014-07-06T03:49:45Z">2014-07-06T03:49:45Z</time></p>
 4 | <p>
 5 |   In December 2013, the vBulletin forum for the social engineering site known as
 6 |   "AstroPID" was breached and
 7 |   <a
 8 |     href="https://www.sinister.ly/Thread-40-Compromised-databases"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >leaked publicly</a
12 |   >. The site provided tips on fraudulently obtaining goods and services, often
13 |   by providing a legitimate "PID" or Product Information Description. The breach
14 |   resulted in nearly 6k user accounts and over 220k private messages between
15 |   forum members being exposed.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/b2busabusinesses/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="b2busabusinesses">B2B USA Businesses</h1>
 2 | 
 3 | <p><time datetime="2017-07-18T07:38:04Z">2017-07-18T07:38:04Z</time></p>
 4 | <p>
 5 |   In mid-2017, a spam list of over 105 million individuals in corporate America
 6 |   was discovered online. Referred to as &quot;B2B USA Businesses&quot;, the list
 7 |   categorised email addresses by employer, providing information on individuals'
 8 |   job titles plus their work phone numbers and physical addresses.
 9 |   <a
10 |     href="https://www.troyhunt.com/have-i-been-pwned-and-spam-lists-of-personal-information"
11 |     target="_blank"
12 |     rel="noopener"
13 |     >Read more about spam lists in HIBP.</a
14 |   >
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/clashofkings/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="clashofkings">Clash of Kings</h1>
 2 | 
 3 | <p><time datetime="2019-07-27T22:03:03Z">2019-07-27T22:03:03Z</time></p>
 4 | <p>
 5 |   In July 2016,
 6 |   <a
 7 |     href="https://www.zdnet.com/article/hacker-steals-forums-of-clash-of-kings-mobile-game/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >the forum for the game &quot;Clash of Kings&quot; suffered a data breach</a
11 |   >
12 |   that impacted 1.6 million subscribers. The impacted data included usernames,
13 |   IP and email addresses and passwords stored as MD5 hashes. The data was
14 |   provided to HIBP by
15 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
16 |   >.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/gamesalad/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="gamesalad">GameSalad</h1>
 2 | 
 3 | <p><time datetime="2019-07-21T14:18:46Z">2019-07-21T14:18:46Z</time></p>
 4 | <p>
 5 |   In February 2019, the education and game creation website
 6 |   <a
 7 |     href="https://www.zdnet.com/article/round-4-hacker-returns-and-puts-26mil-user-records-for-sale-on-the-dark-web/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Game Salad suffered a data breach</a
11 |   >. The incident impacted 1.5M accounts and exposed email addresses, usernames,
12 |   IP addresses and passwords stored as SHA-256 hashes. The data was provided to
13 |   HIBP by a source who requested it be attributed to
14 |   &quot;JimScott.Sec@protonmail.com&quot;.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/canva/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="canva">Canva</h1>
 2 | 
 3 | <p><time datetime="2019-08-09T14:24:01Z">2019-08-09T14:24:01Z</time></p>
 4 | <p>
 5 |   In May 2019, the graphic design tool website
 6 |   <a
 7 |     href="https://support.canva.com/contact/customer-support/may-24-security-incident-faqs/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Canva suffered a data breach</a
11 |   >
12 |   that impacted 137 million subscribers. The exposed data included email
13 |   addresses, usernames, names, cities of residence and passwords stored as
14 |   bcrypt hashes for users not using social logins. The data was provided to HIBP
15 |   by a source who requested it be attributed to "JimScott.Sec@protonmail.com".
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/tout/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="tout">Tout</h1>
 2 | 
 3 | <p><time datetime="2020-01-25T06:12:28Z">2020-01-25T06:12:28Z</time></p>
 4 | <p>
 5 |   In approximately September 2014, the now defunct social networking service
 6 |   <a
 7 |     href="https://en.wikipedia.org/wiki/Tout_(company)"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Tout</a
11 |   >
12 |   suffered a data breach. The breach subsequently appeared years later and
13 |   included 653k unique email addresses, names, IP addresses, the location of the
14 |   user, their bio and passwords stored as bcrypt hashes. The data was provided
15 |   to HIBP by a source who requested it to be attributed to
16 |   &quot;nmapthis@protonmail.com&quot;.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/truckersmp/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="truckersmp">TruckersMP</h1>
 2 | 
 3 | <p><time datetime="2016-04-24T21:27:05Z">2016-04-24T21:27:05Z</time></p>
 4 | <p>
 5 |   In February 2016, the online trucking simulator mod
 6 |   <a href="http://truckersmp.com/en_US/blog/8" target="_blank" rel="noopener"
 7 |     >TruckersMP suffered a data breach</a
 8 |   >
 9 |   which exposed 84k user accounts. In a first for "Have I Been Pwned",
10 |   <a
11 |     href="https://www.troyhunt.com/100-data-breaches-later-have-i-been-pwned-gets-its-first-self-submission/"
12 |     target="_blank"
13 |     rel="noopener"
14 |     >the breached data was self-submitted directly by the organisation that was
15 |     breached itself</a
16 |   >.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/universarium/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="universarium">Universarium</h1>
 2 | 
 3 | <p><time datetime="2020-01-03T09:40:01Z">2020-01-03T09:40:01Z</time></p>
 4 | <p>
 5 |   In approximately November 2019, the Russian &quot;Remote preparatory faculty
 6 |   for IT specialties&quot;
 7 |   <a href="https://universarium.org/" target="_blank" rel="noopener"
 8 |     >Universarium</a
 9 |   >
10 |   suffered a data breach. The incident exposed 565k email addresses and
11 |   passwords in plain text. Universarium did not respond to multiple attempts to
12 |   make contact over a period of many weeks. The data was provided to HIBP by
13 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
14 |   >.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/experian2020/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="experian2020">Experian (South Africa)</h1>
 2 | 
 3 | <p><time datetime="2020-09-01T23:39:52Z">2020-09-01T23:39:52Z</time></p>
 4 | <p>
 5 |   In August 2020,
 6 |   <a
 7 |     href="https://www.iafrikan.com/2020/09/01/experian-data-breach-database-public-data-information-south-africa/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Experian South Africa suffered a data breach</a
11 |   >
12 |   which exposed the personal information of tens of millions of individuals.
13 |   Only 1.3M of the records contained email addresses, whilst most contained
14 |   government issued identity numbers, names, addresses, occupations and
15 |   employers, amongst other person information.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/foxybingo/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="foxybingo">Foxy Bingo</h1>
 2 | 
 3 | <p><time datetime="2015-11-22T01:05:05Z">2015-11-22T01:05:05Z</time></p>
 4 | <p>
 5 |   In April 2007, the online gambling site
 6 |   <a href="https://www.foxybingo.com" target="_blank" rel="noopener"
 7 |     >Foxy Bingo</a
 8 |   >
 9 |   was hacked and 252,000 accounts were obtained by the hackers. The breached
10 |   records
11 |   <a
12 |     href="http://www.itpro.co.uk/637279/gambler-busted-flogging-stolen-data-to-gaming-firms"
13 |     target="_blank"
14 |     rel="noopener"
15 |     >were subsequently sold and traded</a
16 |   >
17 |   and included personal information data such as plain text passwords, birth
18 |   dates and home addresses.
19 | </p>
20 | 


--------------------------------------------------------------------------------
/www/hibp/lifebear/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="lifebear">Lifebear</h1>
 2 | 
 3 | <p><time datetime="2020-05-25T04:02:18Z">2020-05-25T04:02:18Z</time></p>
 4 | <p>
 5 |   In early 2019, the Japanese schedule app
 6 |   <a
 7 |     href="https://www.zdnet.com/article/round-4-hacker-returns-and-puts-26mil-user-records-for-sale-on-the-dark-web/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Lifebear appeared for sale on a dark web marketplace amongst a raft of
11 |     other hacked websites</a
12 |   >. The breach exposed almost 3.7M unique email addresses, usernames and
13 |   passwords stored as salted MD5 hashes. The data was provided to HIBP by a
14 |   source who requested it be attributed to &quot;nano@databases.pw&quot;.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/storybird/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="storybird">StoryBird</h1>
 2 | 
 3 | <p><time datetime="2021-02-02T00:39:58Z">2021-02-02T00:39:58Z</time></p>
 4 | <p>
 5 |   In August 2015, the storytelling service
 6 |   <a
 7 |     href="https://www.zdnet.com/article/hacker-puts-up-for-sale-third-round-of-hacked-databases-on-the-dark-web/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >StoryBird suffered a data breach</a
11 |   >
12 |   exposing 4 million records with 1 million unique email addresses. Impacted
13 |   data also included names, usernames and passwords stored as PBKDF2 hashes. The
14 |   data was provided to HIBP by
15 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
16 |   >.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/wpsandbox/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="wpsandbox">WPSandbox</h1>
 2 | 
 3 | <p><time datetime="2018-11-06T07:26:07Z">2018-11-06T07:26:07Z</time></p>
 4 | <p>
 5 |   In November 2018, the WordPress sandboxing service that allows people to
 6 |   create temporary websites
 7 |   <a href="https://wpsandbox.io/" target="_blank" rel="noopener">WP Sandbox</a>
 8 |   discovered their service was being used to host a phishing site attempting to
 9 |   collect Microsoft OneDrive accounts. After identifying the malicious site, WP
10 |   Sandbox took it offline, contacted the 858 people who provided information to
11 |   it then self-submitted their addresses to HIBP. The phishing page requested
12 |   both email addresses and passwords.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/8fit/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="8fit">8fit</h1>
 2 | 
 3 | <p><time datetime="2019-03-21T18:50:00Z">2019-03-21T18:50:00Z</time></p>
 4 | <p>
 5 |   In July 2018, the health and fitness service
 6 |   <a
 7 |     href="https://8fit.zendesk.com/hc/en-us/articles/360017746394-Notice"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >8fit suffered a data breach</a
11 |   >. The data subsequently appeared for sale on a dark web marketplace in
12 |   February 2019 and included over 15M unique email addresses alongside names,
13 |   genders, IP addresses and passwords stored as bcrypt hashes. The data was
14 |   provided to HIBP by
15 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
16 |   >.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/brazzers/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="brazzers">Brazzers</h1>
 2 | 
 3 | <p><time datetime="2016-09-05T10:02:23Z">2016-09-05T10:02:23Z</time></p>
 4 | <p>
 5 |   In April 2013, the adult website known as
 6 |   <a
 7 |     href="https://motherboard.vice.com/read/nearly-800000-brazzers-porn-site-accounts-exposed-in-forum-hack"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Brazzers was hacked</a
11 |   >
12 |   and 790k accounts were exposed publicly. Each record included a username,
13 |   email address and password stored in plain text. The breach was brought to
14 |   light by the
15 |   <a href="https://vigilante.pw" target="_blank" rel="noopener">Vigilante.pw</a>
16 |   data breach reporting site in September 2016.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/europajobs/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="europajobs">europa.jobs</h1>
 2 | 
 3 | <p><time datetime="2020-01-15T08:51:05Z">2020-01-15T08:51:05Z</time></p>
 4 | <p>
 5 |   In August 2019, the now defunct European jobs website
 6 |   <a
 7 |     href="https://webcache.googleusercontent.com/search?q=cache:Qk_zaGEqx70J:https://en.europa.jobs/+&cd=1&hl=en&ct=clnk&gl=au"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >europa.jobs</a
11 |   >
12 |   (Google cache link) suffered a data breach. The incident exposed 226k unique
13 |   email addresses alongside extensive personal information including names,
14 |   dates of birth, job applications and passwords. The data was subsequently
15 |   redistributed on a popular hacking forum.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/minecraftpocketeditionforum/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="minecraftpocketeditionforum">Minecraft Pocket Edition Forum</h1>
 2 | 
 3 | <p><time datetime="2015-06-30T09:19:43Z">2015-06-30T09:19:43Z</time></p>
 4 | <p>
 5 |   In May 2015, the
 6 |   <a
 7 |     href="http://www.databreaches.net/minecraft-pocket-edition-forum-hacked-dumped/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Minecraft Pocket Edition forum was hacked</a
11 |   >
12 |   and over 16k accounts were dumped public. Allegedly hacked by
13 |   <a href="https://twitter.com/rmsg0d" target="_blank" rel="noopener">@rmsg0d</a
14 |   >, the forum data included numerous personal pieces of data for each user. The
15 |   forum has subsequently been decommissioned.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/mspy/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="mspy">mSpy</h1>
 2 | 
 3 | <p><time datetime="2015-05-28T18:09:16Z">2015-05-28T18:09:16Z</time></p>
 4 | <p>
 5 |   In May 2015, the &quot;monitoring&quot; software known as
 6 |   <a href="http://www.mspy.com" target="_blank" rel="noopener">mSpy</a> suffered
 7 |   a
 8 |   <a
 9 |     href="http://krebsonsecurity.com/2015/05/mobile-spy-software-maker-mspy-hacked-customer-data-leaked/#more-30913"
10 |     target="_blank"
11 |     rel="noopener"
12 |     >major data breach</a
13 |   >. The software (allegedly often used to spy on unsuspecting victims), stored
14 |   extensive personal information within their online service which after being
15 |   breached, was made freely available on the internet.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/rambler/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="rambler">Rambler</h1>
 2 | 
 3 | <p><time datetime="2016-11-01T09:33:34Z">2016-11-01T09:33:34Z</time></p>
 4 | <p>
 5 |   In late 2016, a data dump of almost 100M accounts from Rambler, sometimes
 6 |   referred to as &quot;The Russian Yahoo&quot;,
 7 |   <a
 8 |     href="http://www.zdnet.com/article/russian-portal-email-provider-rambler-hacked-98-million-accounts-leaked/"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >was discovered being traded online</a
12 |   >. The data set provided to Have I Been Pwned included 91M unique usernames
13 |   (which also form part of Rambler email addresses) and plain text passwords.
14 |   According to Rambler, the data dates back to March 2014.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/siae/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="siae">Società Italiana degli Autori ed Editori</h1>
 2 | 
 3 | <p><time datetime="2018-11-07T04:31:14Z">2018-11-07T04:31:14Z</time></p>
 4 | <p>
 5 |   In November 2018, the Società Italiana degli Autori ed Editori (Italian
 6 |   Society of Authors and Publishers, or SIAE)
 7 |   <a
 8 |     href="https://www.repubblica.it/tecnologia/sicurezza/2018/11/03/news/tecnologia_altro_attacco_di_anonplus_bucato_il_sito_della_siae_e_rubati_4_giga_di_dati-210654944/?ref=search"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >was hacked, defaced and almost 4GB of data leaked publicly via Twitter</a
12 |   >. The data included over 14k registered users' names, email addresses and
13 |   passwords.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/coinmama/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="coinmama">Coinmama</h1>
 2 | 
 3 | <p><time datetime="2019-08-30T20:53:29Z">2019-08-30T20:53:29Z</time></p>
 4 | <p>
 5 |   In August 2017, the crypto coin brokerage service
 6 |   <a
 7 |     href="https://cointelegraph.com/news/major-crypto-brokerage-coinmama-reports-450-000-users-affected-by-data-breach"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Coinmama suffered a data breach</a
11 |   >
12 |   that impacted 479k subscribers. The breach was discovered in February 2019
13 |   with exposed data including email addresses, usernames and passwords stored as
14 |   MD5 WordPress hashes. The data was provided to HIBP by white hat security
15 |   researcher and data analyst Adam Davies.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/insanelyi/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="insanelyi">Insanelyi</h1>
 2 | 
 3 | <p><time datetime="2014-07-22T22:56:15Z">2014-07-22T22:56:15Z</time></p>
 4 | <p>
 5 |   In July 2014, the iOS forum
 6 |   <a href="http://insanelyi.com" target="_blank" rel="noopener">Insanelyi</a>
 7 |   was
 8 |   <a
 9 |     href="http://securityaffairs.co/wordpress/26835/hacking/hacked-bigboss-cydia.html?utm_content=bufferc7e16"
10 |     target="_blank"
11 |     rel="noopener"
12 |     >hacked by an attacker known as Kim Jong-Cracks</a
13 |   >. A popular source of information for users of jailbroken iOS devices running
14 |   Cydia, the Insanelyi breach disclosed over 104k users' emails addresses, user
15 |   names and weakly hashed passwords (salted MD5).
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/paddypower/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="paddypower">Paddy Power</h1>
 2 | 
 3 | <p><time datetime="2015-10-11T01:26:05Z">2015-10-11T01:26:05Z</time></p>
 4 | <p>
 5 |   In October 2010, the Irish bookmaker
 6 |   <a
 7 |     href="http://www.telegraph.co.uk/technology/internet-security/11005558/Irish-government-disappointed-over-Paddy-Power-hack.html"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Paddy Power suffered a data breach</a
11 |   >
12 |   that exposed 750,000 customer records with nearly 600,000 unique email
13 |   addresses. The breach was not disclosed until July 2014 and contained
14 |   extensive personal information including names, addresses, phone numbers and
15 |   plain text security questions and answers.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/spirol/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="spirol">Spirol</h1>
 2 | 
 3 | <p><time datetime="2014-02-22T20:47:56Z">2014-02-22T20:47:56Z</time></p>
 4 | <p>
 5 |   In February 2014, Connecticut based Spirol Fastening Solutions
 6 |   <a
 7 |     href="http://news.softpedia.com/news/Details-of-70-000-Users-Leaked-by-Hackers-From-Systems-of-SPIROL-International-428669.shtml"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >suffered a data breach that exposed over 70,000 customer records</a
11 |   >. The attack was allegedly mounted by exploiting a SQL injection
12 |   vulnerability which yielded data from Spirol’s CRM system ranging from
13 |   customers’ names, companies, contact information and over 55,000 unique email
14 |   addresses.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/stockx/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="stockx">StockX</h1>
 2 | 
 3 | <p><time datetime="2019-08-10T15:34:08Z">2019-08-10T15:34:08Z</time></p>
 4 | <p>
 5 |   In July 2019, the fashion and sneaker trading platform
 6 |   <a
 7 |     href="https://stockx.com/news/update-on-data-security-issue/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >StockX suffered a data breach</a
11 |   >
12 |   which was subsequently sold via a dark webmarketplace. The exposed data
13 |   included 6.8 million unique email addresses, names, physical addresses,
14 |   purchases and passwords stored as salted MD5 hashes. The data was provided to
15 |   HIBP by
16 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
17 |   >.
18 | </p>
19 | 


--------------------------------------------------------------------------------
/www/hibp/strongholdkingdoms/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="strongholdkingdoms">Stronghold Kingdoms</h1>
 2 | 
 3 | <p><time datetime="2019-07-21T15:36:01Z">2019-07-21T15:36:01Z</time></p>
 4 | <p>
 5 |   In July 2018, the massive multiplayer online game
 6 |   <a
 7 |     href="https://techraptor.net/content/roll20-stronghold-kingdoms-subject-security-breach"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Stronghold Kingdoms suffered a data breach</a
11 |   >. Almost 5.2 million accounts were impacted by the incident which exposed
12 |   emails addresses, usernames and passwords stored as salted SHA-1 hashes. The
13 |   data was provided to HIBP by a source who requested it be attributed to
14 |   &quot;JimScott.Sec@protonmail.com&quot;.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/yahoo/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="yahoo">Yahoo</h1>
 2 | 
 3 | <p><time datetime="2013-12-04T00:00:00Z">2013-12-04T00:00:00Z</time></p>
 4 | <p>
 5 |   In July 2012, Yahoo! had their online publishing service &quot;Voices&quot;
 6 |   compromised via a SQL injection attack. The breach resulted in the disclosure
 7 |   of nearly half a million usernames and passwords stored in plain text. The
 8 |   breach showed that of the compromised accounts, a staggering
 9 |   <a
10 |     href="http://www.troyhunt.com/2012/07/what-do-sony-and-yahoo-have-in-common.html"
11 |     target="_blank"
12 |     rel="noopener"
13 |     >59% of people who also had accounts in the Sony breach reused their
14 |     passwords across both services</a
15 |   >.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/edmodo/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="edmodo">Edmodo</h1>
 2 | 
 3 | <p><time datetime="2017-06-01T05:59:24Z">2017-06-01T05:59:24Z</time></p>
 4 | <p>
 5 |   In May 2017, the education platform
 6 |   <a
 7 |     href="https://motherboard.vice.com/en_us/article/hacker-steals-millions-of-user-account-details-from-education-platform-edmodo"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Edmodo was hacked</a
11 |   >
12 |   resulting in the exposure of 77 million records comprised of over 43 million
13 |   unique customer email addresses. The data was consequently published to a
14 |   popular hacking forum and made freely available. The records in the breach
15 |   included usernames, email addresses and bcrypt hashes of passwords.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/lyricsmania/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="lyricsmania">Lyrics Mania</h1>
 2 | 
 3 | <p><time datetime="2018-01-15T06:32:46Z">2018-01-15T06:32:46Z</time></p>
 4 | <p>
 5 |   In December 2017, the song lyrics website known as
 6 |   <a href="https://www.lyricsmania.com/" target="_blank" rel="noopener"
 7 |     >Lyrics Mania</a
 8 |   >
 9 |   suffered a data breach. The data in the breach included 109k usernames, email
10 |   addresses and plain text passwords.
11 |   <a
12 |     href="https://www.troyhunt.com/streamlining-data-breach-disclosure-a-step-by-step-process"
13 |     target="_blank"
14 |     rel="noopener"
15 |     >Numerous attempts were made to contact Lyrics Mania about the incident</a
16 |   >, however no responses were received.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/programmingforums/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="programmingforums">Programming Forums</h1>
 2 | 
 3 | <p><time datetime="2017-07-01T16:42:46Z">2017-07-01T16:42:46Z</time></p>
 4 | <p>
 5 |   In approximately late 2015, the programming forum at
 6 |   <a href="http://www.programmingforums.org/" target="_blank" rel="noopener"
 7 |     >programmingforums.org</a
 8 |   >
 9 |   suffered a data breach resulting in the exposure of 707k unique user records.
10 |   The data contained email and IP addresses, usernames and salted MD5 hashes of
11 |   passwords. The site was previously reported as compromised on the
12 |   <a href="https://vigilante.pw/" target="_blank" rel="noopener"
13 |     >Vigilante.pw</a
14 |   >
15 |   breached database directory.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/zomato/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="zomato">Zomato</h1>
 2 | 
 3 | <p><time datetime="2017-09-04T21:06:46Z">2017-09-04T21:06:46Z</time></p>
 4 | <p>
 5 |   In May 2017, the restaurant guide website
 6 |   <a
 7 |     href="https://www.hackread.com/zomato-hacked-17-million-accounts-sold-on-dark-web/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Zomato was hacked</a
11 |   >
12 |   resulting in the exposure of almost 17 million accounts. The data was
13 |   consequently redistributed online and contains email addresses, usernames and
14 |   salted MD5 hashes of passwords (the password hash was not present on all
15 |   accounts). This data was provided to HIBP by whitehat security researcher and
16 |   data analyst Adam Davies.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/armorgames/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="armorgames">Armor Games</h1>
 2 | 
 3 | <p><time datetime="2019-07-20T06:03:31Z">2019-07-20T06:03:31Z</time></p>
 4 | <p>
 5 |   In January 2019, the game portal website website
 6 |   <a
 7 |     href="https://techraptor.net/content/armor-games-data-breach-january-2019"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Armor Games suffered a data breach</a
11 |   >. A total of 10.6 million email addresses were impacted by the breach which
12 |   also exposed usernames, IP addresses, birthdays of administrator accounts and
13 |   passwords stored as salted SHA-1 hashes. The data was provided to HIBP by a
14 |   source who requested it be attributed to
15 |   &quot;JimScott.Sec@protonmail.com&quot;.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/clubpenguinrewrittenjul2019/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="clubpenguinrewrittenjul2019">Club Penguin Rewritten (July 2019)</h1>
 2 | 
 3 | <p><time datetime="2019-07-30T14:05:10Z">2019-07-30T14:05:10Z</time></p>
 4 | <p>
 5 |   In July 2019, the children's gaming site
 6 |   <a href="https://community.cprewritten.net/" target="_blank" rel="noopener"
 7 |     >Club Penguin Rewritten</a
 8 |   >
 9 |   (CPRewritten) suffered a data breach (note: CPRewritten is an independent
10 |   recreation of Disney's Club Penguin game). In addition to an earlier data
11 |   breach that impacted 1.7 million accounts, the subsequent breach exposed 4
12 |   million unique email addresses alongside IP addresses, usernames and passwords
13 |   stored as bcrypt hashes.
14 | </p>
15 | 


--------------------------------------------------------------------------------
/www/hibp/dunzo/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="dunzo">Dunzo</h1>
 2 | 
 3 | <p><time datetime="2020-07-29T04:38:23Z">2020-07-29T04:38:23Z</time></p>
 4 | <p>
 5 |   In approximately June 2019, the Indian delivery service
 6 |   <a
 7 |     href="https://www.thenewsminute.com/article/dunzo-suffers-data-breach-launches-internal-investigation-128415"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Dunzo suffered a data breach</a
11 |   >. Exposing 3.5 million unique email addresses, the Dunzo breach also included
12 |   names, phone numbers and IP addresses which were all broadly distributed
13 |   online via a hacking forum. The data was provided to HIBP by
14 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
15 |   >.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/eatstreet/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="eatstreet">EatStreet</h1>
 2 | 
 3 | <p><time datetime="2019-07-19T11:29:35Z">2019-07-19T11:29:35Z</time></p>
 4 | <p>
 5 |   In May 2019, the online food ordering service
 6 |   <a
 7 |     href="https://www.zdnet.com/article/eatstreet-food-ordering-service-discloses-security-breach/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >EatStreet suffered a data breach affecting 6.4 million customers</a
11 |   >. An extensive amount of personal data was obtained including names, phone
12 |   numbers, addresses, partial credit card data and passwords stored as bcrypt
13 |   hashes. The data was provided to HIBP by a source who requested it be
14 |   attributed to &quot;JimScott.Sec@protonmail.com&quot;.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/epicbot/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="epicbot">EpicBot</h1>
 2 | 
 3 | <p><time datetime="2019-11-19T23:29:42Z">2019-11-19T23:29:42Z</time></p>
 4 | <p>
 5 |   In September 2019, the RuneScape bot provider
 6 |   <a
 7 |     href="https://arstechnica.com/information-technology/2019/11/password-data-dumped-online-for-2-2-million-users-of-currency-and-gaming-sites/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >EpicBot suffered a data breach that impacted 817k subscribers</a
11 |   >. Data from the breach was subsequently shared on a popular hacking forum and
12 |   included usernames, email and IP addresses and passwords stored as either
13 |   salted MD5 or bcrypt hashes. EpicBot did not respond when contacted about the
14 |   incident.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/ixigo/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="ixigo">ixigo</h1>
 2 | 
 3 | <p><time datetime="2019-03-17T13:27:11Z">2019-03-17T13:27:11Z</time></p>
 4 | <p>
 5 |   In January 2019, the travel and hotel booking site
 6 |   <a
 7 |     href="https://techcrunch.com/2019/02/14/hacker-strikes-again/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >ixigo suffered a data breach</a
11 |   >. The data appeared for sale on a dark web marketplace the following month
12 |   and included over 17M unique email addresses alongside names, genders, phone
13 |   numbers, connections to Facebook profiles and passwords stored as MD5 hashes.
14 |   The data was provided to HIBP by a source who requested it to be attributed to
15 |   &quot;BenjaminBlue@exploit.im&quot;.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/muslimdirectory/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="muslimdirectory">Muslim Directory</h1>
 2 | 
 3 | <p><time datetime="2014-02-23T03:09:38Z">2014-02-23T03:09:38Z</time></p>
 4 | <p>
 5 |   In February 2014, the UK guide to services and business known as the Muslim
 6 |   Directory was
 7 |   <a
 8 |     href="http://www.cyberwarnews.info/2014/02/17/muslim-directory-hacked-38903-user-credentials-leaked/"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >attacked by the hacker known as @th3inf1d3l</a
12 |   >. The data was consequently dumped publicly and included the web accounts of
13 |   tens of thousands of users which contained data including their names, home
14 |   address, age group, email, website activity and password in plain text.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/nemoweb/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="nemoweb">NemoWeb</h1>
 2 | 
 3 | <p><time datetime="2018-09-19T03:53:20Z">2018-09-19T03:53:20Z</time></p>
 4 | <p>
 5 |   In September 2016, almost 21GB of data from the French website used for
 6 |   &quot;standardised and decentralized means of exchange for publishing
 7 |   newsgroup articles&quot;
 8 |   <a href="http://www.nemoweb.net/" target="_blank" rel="noopener">NemoWeb</a>
 9 |   was leaked from what appears to have been an unprotected Mongo DB. The data
10 |   consisted of a large volume of emails sent to the service and included almost
11 |   3.5M unique addresses, albeit many of them auto-generated. Multiple attempts
12 |   were made to contact the operators of NemoWeb but no response was received.
13 | </p>
14 | 


--------------------------------------------------------------------------------
/www/hibp/nival/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="nival">Nival</h1>
 2 | 
 3 | <p><time datetime="2016-03-03T00:32:49Z">2016-03-03T00:32:49Z</time></p>
 4 | <p>
 5 |   In February 2016, the Russian gaming company
 6 |   <a href="http://nival.com" target="_blank" rel="noopener">Nival</a> was the
 7 |   target of an attack which was consequently
 8 |   <a
 9 |     href="https://www.reddit.com/r/pwned/comments/47u1bf/operation_wrath_of_anakin_evolved"
10 |     target="_blank"
11 |     rel="noopener"
12 |     >detailed on Reddit</a
13 |   >. Allegedly protesting &quot;the foreign policy of Russia in regards to
14 |   Ukraine&quot;, Nival was one of several Russian sites in the breach and
15 |   impacted over 1.5M accounts including sensitive personal information.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/tesco/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="tesco">Tesco</h1>
 2 | 
 3 | <p><time datetime="2014-02-13T21:19:24Z">2014-02-13T21:19:24Z</time></p>
 4 | <p>
 5 |   In February 2014,
 6 |   <a
 7 |     href="http://www.bbc.co.uk/news/technology-26171130"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >over 2,000 Tesco accounts with usernames, passwords and loyalty card
11 |     balances appeared on Pastebin</a
12 |   >. Whilst the source of the breach is not clear, many confirmed the
13 |   credentials were valid for Tesco and indeed
14 |   <a
15 |     href="http://www.troyhunt.com/2012/07/lessons-in-website-security-anti.html"
16 |     target="_blank"
17 |     rel="noopener"
18 |   >
19 |     they have a history of poor online security</a
20 |   >.
21 | </p>
22 | 


--------------------------------------------------------------------------------
/www/hibp/coachella/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="coachella">Coachella</h1>
 2 | 
 3 | <p><time datetime="2017-06-27T10:57:03Z">2017-06-27T10:57:03Z</time></p>
 4 | <p>
 5 |   In February 2017,
 6 |   <a
 7 |     href="https://motherboard.vice.com/en_us/article/mgkzkp/someone-is-selling-coachella-user-accounts-on-the-dark-web"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >hundreds of thousands of records from the Coachella music festival were
11 |     discovered being sold online</a
12 |   >. Allegedly taken from a combination of the main Coachella website and their
13 |   vBulletin-based message board, the data included almost 600k usernames, IP and
14 |   email addresses and salted hashes of passwords (MD5 in the case of the message
15 |   board).
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/dailyobjects/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="dailyobjects">DailyObjects</h1>
 2 | 
 3 | <p><time datetime="2020-01-28T10:50:00Z">2020-01-28T10:50:00Z</time></p>
 4 | <p>
 5 |   In approximately January 2018, a collection of more than 464k customer records
 6 |   from the Indian online retailer
 7 |   <a href="https://www.dailyobjects.com/" target="_blank" rel="noopener"
 8 |     >DailyObjects</a
 9 |   >
10 |   were leaked online. The data included names, physical and email addresses,
11 |   phone numbers and &quot;pincodes&quot; stored in plain text. After multiple
12 |   attempts to contact them, DailyObjects responded and received a copy of the
13 |   data for verification, however failed to respond to multiple contact attempts
14 |   following that.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/hautelook/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="hautelook">HauteLook</h1>
 2 | 
 3 | <p><time datetime="2019-03-21T21:57:32Z">2019-03-21T21:57:32Z</time></p>
 4 | <p>
 5 |   In mid-2018, the fashion shopping site
 6 |   <a
 7 |     href="https://www.theregister.co.uk/2019/02/11/620_million_hacked_accounts_dark_web/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >HauteLook was among a raft of sites that were breached and their data then
11 |     sold in early-2019</a
12 |   >. The data included over 28 million unique email addresses alongside names,
13 |   genders, dates of birth and passwords stored as bcrypt hashes. The data was
14 |   provided to HIBP by
15 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
16 |   >.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/hookersnl/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="hookersnl">Hookers.nl</h1>
 2 | 
 3 | <p><time datetime="2019-10-23T09:51:59Z">2019-10-23T09:51:59Z</time></p>
 4 | <p>
 5 |   In October 2019, the Dutch prostitution forum
 6 |   <a
 7 |     href="https://www.forbes.com/sites/thomasbrewster/2019/10/10/dutch-prostitution-site-hookersnl-hacked--250000-users-data-leaked/#3e3f231522f8"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Hookers.nl suffered a data breach</a
11 |   >
12 |   which exposed the personal information of sex workers and their customers. The
13 |   IP and email addresses, usernames and either bcrypt or salted MD5 password
14 |   hashes of 291k members were accessed via an unpatched vulnerability in the
15 |   vBulletin forum software.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/kmru/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="kmru">KM.RU</h1>
 2 | 
 3 | <p><time datetime="2016-03-03T06:12:04Z">2016-03-03T06:12:04Z</time></p>
 4 | <p>
 5 |   In February 2016, the Russian portal and email service
 6 |   <a href="http://km.ru" target="_blank" rel="noopener">KM.RU</a> was the target
 7 |   of an attack which was consequently
 8 |   <a
 9 |     href="https://www.reddit.com/r/pwned/comments/47u1bf/operation_wrath_of_anakin_evolved"
10 |     target="_blank"
11 |     rel="noopener"
12 |     >detailed on Reddit</a
13 |   >. Allegedly protesting &quot;the foreign policy of Russia in regards to
14 |   Ukraine&quot;, KM.RU was one of several Russian sites in the breach and
15 |   impacted almost 1.5M accounts including sensitive personal information.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/pixlr/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="pixlr">Pixlr</h1>
 2 | 
 3 | <p><time datetime="2021-02-01T03:40:29Z">2021-02-01T03:40:29Z</time></p>
 4 | <p>
 5 |   In October 2020, the online photo editing application
 6 |   <a
 7 |     href="https://www.bleepingcomputer.com/news/security/hacker-posts-19-million-pixlr-user-records-for-free-on-forum/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Pixlr suffered a data breach</a
11 |   >
12 |   exposing 1.9 million subscribers. Impacted data included names, email
13 |   addresses, social media profiles, the country signed up from and passwords
14 |   stored as SHA-512 hashes. The data was provided to HIBP by
15 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
16 |   >.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/promofarma/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="promofarma">Promofarma</h1>
 2 | 
 3 | <p><time datetime="2020-11-01T07:11:46Z">2020-11-01T07:11:46Z</time></p>
 4 | <p>
 5 |   In August 2019,
 6 |   <a
 7 |     href="https://www.zdnet.com/article/data-of-21-million-mixcloud-users-put-up-for-sale-on-the-dark-web/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >a data breach from the Spanish online pharmacy Promofarma appeared for sale
11 |     on a dark web marketplace</a
12 |   >. The breach exposed over 2.7M records and contained almost 1.3M unique
13 |   customer email addresses. The data also included customer names and was
14 |   provided to HIBP by
15 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
16 |   >.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/tailieu/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="tailieu">TaiLieu</h1>
 2 | 
 3 | <p><time datetime="2020-05-03T23:48:08Z">2020-05-03T23:48:08Z</time></p>
 4 | <p>
 5 |   In November 2019, the Vietnamese education website
 6 |   <a href="https://tailieu.vn/" target="_blank" rel="noopener">TaiLieu</a>
 7 |   allegedly suffered a data breach exposing 7.3M customer records. Impacted data
 8 |   included names and usernames, email addresses, dates of birth, genders and
 9 |   passwords stored as unsalted MD5 hashes. The data was provided to HIBP by
10 |   <a href="https://dehashed.com/" target="_blank" rel="noopener"
11 |     >dehashed.com</a
12 |   >
13 |   after being shared on a popular hacking forum. TaiLieu did not respond when
14 |   contacted about the incident.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/tokopedia/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="tokopedia">Tokopedia</h1>
 2 | 
 3 | <p><time datetime="2020-05-02T23:45:21Z">2020-05-02T23:45:21Z</time></p>
 4 | <p>
 5 |   In April 2020, Indonesia's largest online store
 6 |   <a
 7 |     href="https://www.zdnet.com/article/hacker-leaks-15-million-records-from-tokopedia-indonesias-largest-online-store/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Tokopedia suffered a data breach</a
11 |   >. The incident resulted in 15M rows of data being posted to a popular hacking
12 |   forum. An additional 76M rows were later provided to HIBP in July 2020. In
13 |   total, the data included over 71M unique email addresses alongside names,
14 |   genders, birth dates and passwords stored as SHA2-384 hashes.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/123rf/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="123rf">123RF</h1>
 2 | 
 3 | <p><time datetime="2020-11-15T00:59:50Z">2020-11-15T00:59:50Z</time></p>
 4 | <p>
 5 |   In March 2020, the stock photo site
 6 |   <a
 7 |     href="https://www.bleepingcomputer.com/news/security/popular-stock-photo-service-hit-by-data-breach-83m-records-for-sale/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >123RF suffered a data breach</a
11 |   >
12 |   which impacted over 8 million subscribers and was subsequently sold online.
13 |   The breach included email, IP and physical addresses, names, phone numbers and
14 |   passwords stored as MD5 hashes. The data was provided to HIBP by
15 |   <a href="https://dehashed.com/" target="_blank" rel="noopener">dehashed.com</a
16 |   >.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/bukalapak/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="bukalapak">Bukalapak</h1>
 2 | 
 3 | <p><time datetime="2019-04-18T01:57:35Z">2019-04-18T01:57:35Z</time></p>
 4 | <p>
 5 |   In March 2019, the Indonesian e-commerce website
 6 |   <a
 7 |     href="https://www.bukalapak.com/blog/feature-updates/petunjuk-teknis-105502"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Bukalapak discovered a data breach of the organisation's backups dating
11 |     back to October 2017</a
12 |   >. The incident exposed approximately 13 million unique email addresses
13 |   alongside IP addresses, names and passwords stored as bcrypt and salted
14 |   SHA-512 hashes. The data was provided to HIBP by a source who requested it to
15 |   be attributed to &quot;Maxime Thalet&quot;.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/evermotion/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="evermotion">Evermotion</h1>
 2 | 
 3 | <p><time datetime="2017-07-02T13:49:09Z">2017-07-02T13:49:09Z</time></p>
 4 | <p>
 5 |   In May 2015, the Polish 3D modelling website known as
 6 |   <a href="https://evermotion.org/" target="_blank" rel="noopener"
 7 |     >Evermotion</a
 8 |   >
 9 |   suffered a data breach resulting in the exposure of 435k unique user records.
10 |   The data was sourced from a vBulletin forum and contained email addresses,
11 |   usernames, dates of birth and salted MD5 hashes of passwords. The site was
12 |   previously reported as compromised on the
13 |   <a href="https://vigilante.pw/" target="_blank" rel="noopener"
14 |     >Vigilante.pw</a
15 |   >
16 |   breached database directory.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/netprospex/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="netprospex">NetProspex</h1>
 2 | 
 3 | <p><time datetime="2017-03-15T01:57:04Z">2017-03-15T01:57:04Z</time></p>
 4 | <p>
 5 |   In 2016, a list of over 33 million individuals in corporate America sourced
 6 |   from Dun & Bradstreet's NetProspex service
 7 |   <a
 8 |     href="https://www.troyhunt.com/weve-lost-control-of-our-personal-data-including-33m-netprospex-records"
 9 |     target="_blank"
10 |     rel="noopener"
11 |     >was leaked online</a
12 |   >. D&B believe the targeted marketing data was lost by a customer who
13 |   purchased it from them. It contained extensive personal and corporate
14 |   information including names, email addresses, job titles and general
15 |   information about the employer.
16 | </p>
17 | 


--------------------------------------------------------------------------------
/www/hibp/ogusers2020/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="ogusers2020">OGUsers (2020 breach)</h1>
 2 | 
 3 | <p><time datetime="2020-04-04T08:27:13Z">2020-04-04T08:27:13Z</time></p>
 4 | <p>
 5 |   In April 2020, the account hijacking and SIM swapping forum
 6 |   <a
 7 |     href="https://www.zdnet.com/article/hacking-forum-gets-hacked-for-the-second-time-in-a-year/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >OGUsers suffered their second data breach in less than a year</a
11 |   >. As with the previous breach, the exposed data included email and IP
12 |   addresses, usernames, private messages and passwords stored as salted MD5
13 |   hashes. A total of 263k email addresses across user accounts and other tables
14 |   were posted to a rival hacking forum.
15 | </p>
16 | 


--------------------------------------------------------------------------------
/www/hibp/staminus/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="staminus">Staminus</h1>
 2 | 
 3 | <p><time datetime="2017-10-05T03:58:50Z">2017-10-05T03:58:50Z</time></p>
 4 | <p>
 5 |   In March 2016, the DDoS protection service
 6 |   <a
 7 |     href="https://krebsonsecurity.com/2016/03/hackers-target-anti-ddos-firm-staminus/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >Staminus was &quot;massively hacked&quot;</a
11 |   >
12 |   resulting in an outage of more than 20 hours and the disclosure of customer
13 |   credentials (with unsalted MD5 hashes), support tickets, credit card numbers
14 |   and other sensitive data. 27k unique email addresses were found in the data
15 |   which was subsequently released to the public. Staminus is no longer in
16 |   operation.
17 | </p>
18 | 


--------------------------------------------------------------------------------
/www/hibp/streeteasy/index.html:
--------------------------------------------------------------------------------
 1 | <h1 id="streeteasy">StreetEasy</h1>
 2 | 
 3 | <p><time datetime="2019-10-06T18:18:50Z">2019-10-06T18:18:50Z</time></p>
 4 | <p>
 5 |   In approximately June 2016, the real estate website
 6 |   <a
 7 |     href="https://therealdeal.com/2019/02/19/a-million-streeteasy-accounts-hacked/"
 8 |     target="_blank"
 9 |     rel="noopener"
10 |     >StreetEasy suffered a data breach</a
11 |   >. In total, 988k unique email addresses were included in the breach alongside
12 |   names, usernames and SHA-1 hashes of passwords, all of which appeared for sale
13 |   on a dark web marketplace in February 2019. The data was provided to HIBP by a
14 |   source who requested it be attributed to
15 |   &quot;JimScott.Sec@protonmail.com&quot;.
16 | </p>
17 | 


--------------------------------------------------------------------------------