Breaches

In November 2015, the dating website Beautiful People was hacked and over 1.1M accounts were leaked. The data was being traded in underground circles and included a huge amount of personal information related to dating.

Beauty ratings · Car ownership statuses · Dates of birth · Drinking habits · Education levels · Email addresses · Genders · Geographic locations · Home ownership statuses · Income levels · IP addresses · Job titles · Names · Passwords · Personal descriptions · Personal interests · Physical attributes · Sexual orientations · Smoking habits · Website activity

In February 2016, the online trucking simulator mod TruckersMP suffered a data breach which exposed 84k user accounts. In a first for "Have I Been Pwned", the breached data was self-submitted directly by the organisation that was breached itself.

Email addresses · Passwords · Usernames

In March 2016, the adult website Naughty America was hacked and the data consequently sold online. The breach included data from numerous systems with various personal identity attributes, the largest of which had passwords stored as easily crackable MD5 hashes. There were 1.4 million unique email addresses in the breach.

Dates of birth · Email addresses · IP addresses · Passwords · Usernames · Website activity

In February 2016, the dating site mate1.com suffered a huge data breach resulting in the disclosure of over 27 million subscribers' information. The data included deeply personal information about their private lives including drug and alcohol habits, incomes levels and sexual fetishes as well as passwords stored in plain text.

Astrological signs · Dates of birth · Drinking habits · Drug habits · Education levels · Email addresses · Ethnicities · Fitness levels · Genders · Geographic locations · Income levels · Job titles · Names · Parenting plans · Passwords · Personal descriptions · Physical attributes · Political views · Relationship statuses · Religions · Sexual fetishes · Travel habits · Usernames · Website activity · Work habits

In March 2016, the Philippines Commission of Elections website (COMELEC) was attacked and defaced, allegedly by Anonymous Philippines. Shortly after, data on 55 million Filipino voters was leaked publicly and included sensitive information such as genders, marital statuses, height and weight and biometric fingerprint data. The breach only included 228k email addresses.

Biometric data · Dates of birth · Email addresses · Family members' names · Genders · Job titles · Marital statuses · Names · Passport numbers · Phone numbers · Physical addresses · Physical attributes

In December 2015, the forum for discussing naked celebrity photos known as "The Fappening" (named after the iCloud leaks of 2014) was compromised and 179k accounts were leaked. Exposed member data included usernames, email addresses and salted hashes of passwords.

Email addresses · Passwords · Usernames

In May 2014, the Avast anti-virus forum was hacked and 423k member records were exposed. The Simple Machines Based forum included usernames, emails and password hashes.

Email addresses · Passwords · Usernames

In August 2013, the interactive video game Lord of the Rings Online suffered a data breach that exposed over 1.1M players' accounts. The data was being actively traded on underground forums and included email addresses, birth dates and password hashes.

Dates of birth · Email addresses · IP addresses · Passwords · Usernames · Website activity

In April 2013, the interactive video game Dungeons & Dragons Online suffered a data breach that exposed almost 1.6M players' accounts. The data was being actively traded on underground forums and included email addresses, birth dates and password hashes.

Dates of birth · Email addresses · IP addresses · Passwords · Usernames · Website activity

In December 2014, the electronic sports organisation known as Team SoloMid was hacked and 442k members accounts were leaked. The accounts included email and IP addresses, usernames and salted hashes of passwords.

Email addresses · IP addresses · Passwords · Usernames

In November 2014, the Malwarebytes forum was hacked and 111k member records were exposed. The IP.Board forum included email and IP addresses, birth dates and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.

Dates of birth · Email addresses · IP addresses · Passwords · Usernames · Website activity

In June 2015, the French Minecraft server known as Minefield was hacked and 188k member records were exposed. The IP.Board forum included email and IP addresses, birth dates and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.

Dates of birth · Email addresses · IP addresses · Passwords · Usernames · Website activity

In July 2015, the torrent site Seedpeer was hacked and 282k member records were exposed. The data included usernames, email addresses and passwords stored as weak MD5 hashes.

Email addresses · Passwords · Usernames

In June 2014, the torrent site Sumo Torrent was hacked and 285k member records were exposed. The data included IP addresses, email addresses and passwords stored as weak MD5 hashes.

Email addresses · IP addresses · Passwords · Usernames · Website activity

In July 2015, the IP.Board forum for the gaming website WildStar suffered a data breach that exposed over 738k forum members' accounts. The data was being actively traded on underground forums and included email addresses, birth dates and passwords.

Dates of birth · Email addresses · IP addresses · Passwords · Usernames

In November 2014, the acne website acne.org suffered a data breach that exposed over 430k forum members' accounts. The data was being actively traded on underground forums and included email addresses, birth dates and passwords.

Dates of birth · Email addresses · IP addresses · Passwords · Usernames

In February 2016, the Russian portal and email service KM.RU was the target of an attack which was consequently detailed on Reddit. Allegedly protesting "the foreign policy of Russia in regards to Ukraine", KM.RU was one of several Russian sites in the breach and impacted almost 1.5M accounts including sensitive personal information.

Dates of birth · Email addresses · Genders · Geographic locations · Recovery email addresses · Security questions and answers · Usernames

In November 2015, almost 270k accounts from the MajorGeeks support forum were breached. The accounts were being actively sold and traded online and included email addresses, salted password hashes and IP addresses.

Email addresses · IP addresses · Passwords · Usernames

In February 2016, the Russian gaming company Nival was the target of an attack which was consequently detailed on Reddit. Allegedly protesting "the foreign policy of Russia in regards to Ukraine", Nival was one of several Russian sites in the breach and impacted over 1.5M accounts including sensitive personal information.

Avatars · Dates of birth · Email addresses · Genders · Names · Spoken languages · Usernames · Website activity

During 2015, the iPmart forum (now known as Mobi NUKE) was hacked and over 2 million forum members' details were exposed. The vBulletin forum included IP addresses, birth dates and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked. A further 368k accounts were added to "Have I Been Pwned" in March 2016 bringing the total to over 2.4M.

Dates of birth · Email addresses · Passwords · Usernames