XposedOrNot

@XposedOrNot@infosec.exchange += Hallmark Data Breach

The Hallmark #databreach occurred in March 2026 and involved an alleged breach and extortion incident impacting data stored in Salesforce, with 1.8M unique email addresses later published along with associated customer information.

Exposed data: Email addresses, Names, Phone numbers, Physical addresses

Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += Gravatar Data Breach

The Gravatar #databreach occurred in 2020 when an unauthorized party accessed user data, exposing hashed email addresses and usernames, with a portion of the hashes later cracked.

Exposed data: Hashed email addresses, Usernames

Potential risks: Phishing, Targeted scams, and privacy breaches

@XposedOrNot@infosec.exchange += HumanizerPro Data Breach

The HumanizerPro #databreach occurred in March 2026 when data was exposed via a publicly accessible source, affecting over 65K users and leaking email addresses along with user-generated content.

Exposed data: Email addresses, Full input histories, User-submitted prompts, Rewritten texts

Potential risks: Phishing, Targeted scams, and privacy breaches

@XposedOrNot@infosec.exchange += TLDRtech Data Breach

The TLDRtech #databreach occurred in March 2026, when data was exposed via an Apollo enrichment API endpoint, resulting in the exposure of over 1.2M user records, including associated profile information.

Exposed data: Email addresses, Names, Usernames, Geographic locations, Linked social media profiles

Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += Cuties AI Data Breach

The Cuties AI #databreach occurred in March 2026 when the NSFW AI companion platform was compromised, with data later published on a public hacking forum exposing 153K unique email addresses and associated user content.

Exposed data: Email addresses, Display names, Avatars, Prompts and descriptions, URLs to generated content

Potential risks: Phishing, Targeted scams, and privacy breaches

@XposedOrNot@infosec.exchange += SongTrivia2 Data Breach

The SongTrivia2 #databreach occurred in April 2026 when the platform was compromised, with data later published on a public hacking forum exposing 291K unique email addresses and associated account information.

Exposed data: Email addresses, Names, Usernames, Passwords (bcrypt hashes)

Potential risks: Account takeover, Credential stuffing, Phishing, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += CFGI Data Breach

The CFGI #databreach occurred in March 2026 and exposed over 800K records, including more than 40K financial documents and internal corporate data, with 250K unique email addresses impacted.

Exposed data: Email addresses, Names, Phone numbers, Physical addresses, Usernames, Geographic locations, Financial documents, Internal corporate data

Potential risks: Identity theft, Financial fraud, Phishing, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += Infinite Campus Data Breach

The Infinite Campus #databreach occurred in March 2026 and exposed 137K records from the education technology platform, including sensitive personal and account information.

Exposed data: Email addresses, Phone numbers, Names, Physical addresses, Usernames, Dates of birth, Genders, Geographic locations, Passwords

Potential risks: Identity theft, Account takeover, Credential stuffing, Phishing, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += Success Data Breach

The Success #databreach occurred in March 2026 and exposed 142K unique email addresses along with associated personal and order information, with the system also abused to send offensive newsletters.

Exposed data: Email addresses, Names, IP addresses, Phone numbers, Passwords (bcrypt hashes), Physical addresses, Payment methods

Potential risks: Phishing, Identity theft, Account takeover, Credential stuffing, Financial fraud, Targeted scams, Privacy breaches

XposedOrNot += BreachForums Version 5 Data Breach

The BreachForums Version 5 #databreach occurred in March 2026 when the hacking forum was publicly exposed, leaking 340K unique email addresses along with associated account data.

Exposed data: Email addresses, Usernames, Passwords (Argon2 hashes)

Potential risks: Account takeover, Credential stuffing, Phishing, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += Aura Data Breach

The Aura #databreach occurred in March 2026 when the online safety service disclosed a breach involving data linked to a marketing tool from an acquired company, exposing 922K unique email addresses and associated information.

Exposed data: Email addresses, Names, Phone numbers, Physical addresses, IP addresses

Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += Cal AI Data Breach

The Cal AI #databreach occurred in March 2026 and exposed over 3M user records from the AI-powered calorie tracking app, including more than 2.8M unique email addresses and associated profile information.

Exposed data: Email addresses, Names, Dates of birth, Genders, Usernames, Linked social media profiles

Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += Thermomix owners’ recipe forum Data Breach

The Rezeptwelt #databreach occurred in January 2025 and exposed details of 3.1M registered users of the Thermomix owners’ recipe forum.

Exposed data: Names, Email addresses, Physical addresses, Phone numbers, Dates of birth

@XposedOrNot@infosec.exchange += APOIA.se Data Breach

The APOIA.se #databreach occurred in December 2025 when the platform’s database was posted to an online forum, later confirmed in January 2026, exposing 451K unique email addresses and associated user information.

Exposed data: Email addresses, Names, Physical addresses

Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += BitView Data Breach

The BitView #databreach occurred in December 2024 and exposed 63K user records from the video-sharing community.

Exposed data: Email addresses, IP addresses, Usernames, Passwords (bcrypt hashes), Gender, Dates of birth, Countries

Potential risks: Account takeover, Credential stuffing, Phishing, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += Ggumim(Decorating the House) Data Breach

The Ggumim #databreach occurred in March 2020, when the Korean interior decoration website ggumim.co.kr was compromised, affecting nearly 1.3M members, and the data was later widely shared online.

Exposed data: Email addresses, Names, Usernames, Phone numbers

Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += Figure Data Breach

The Figure #databreach occurred in February 2026 after a social engineering attack led to customer data being publicly posted online, exposing around 970K unique email addresses and associated personal information.

Exposed data: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth

Potential risks: Identity theft, Phishing, Financial fraud, Account takeover, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += Association Nationale des Premiers Secours (ANPS) Data Breach

The Association Nationale des Premiers Secours (ANPS) #databreach occurred in January 2026 when data was posted to a hacking forum, exposing 5.6K unique email addresses and associated personal information.

Exposed data: Email addresses, Names, Dates of birth, Places of birth

Potential risks: Identity theft, Phishing, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += VimeWorld Data Breach

The VimeWorld #databreach occurred in October 2018 when the Russian Minecraft server network was compromised, with 3.1M records later posted to a hacking forum.

Exposed data: Usernames, Email addresses, IP addresses, Passwords (MD5 hashes, bcrypt hashes)

Potential risks: Account takeover, Credential stuffing, Phishing, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += TheSqua.re Data Breach

The TheSqua.re #databreach occurred in June 2025 when 107K unique customer email addresses were allegedly obtained and later posted to a popular hacking forum, along with additional personal details.

Exposed data: Email addresses, Names, Phone numbers, Cities

Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += Pass'Sport Data Breach

The Pass'Sport #databreach occurred in December 2025 when data was posted to a popular hacking forum, exposing personal information from the French government sports subsidy program.

Exposed data: Names, Phone numbers, Genders, Physical addresses

Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += Odido Data Breach

The Odido #databreach occurred in February 2026 and involved a breach followed by an extortion attempt, with 2M records published across multiple leaks exposing 893K unique email addresses and associated customer information.

Exposed data: Email addresses, Names, Physical addresses, Phone numbers, Bank account numbers, Customer service notes, Dates of birth, Passport numbers, Driver’s license numbers

Potential risks: Identity theft, Financial fraud, Phishing, Account takeover, Targeted scams, Privacy breaches

@XposedOrNot@infosec.exchange += MSI Data Breach

The MSI #databreach occurred in July 2024 when RMA warranty claim data was found publicly accessible, impacting 250K unique email addresses along with associated customer records.

Exposed data: Email addresses, Names, Phone numbers, Physical addresses, Warranty claim details

Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches, Financial fraud