mastodon 4.8.0-alpha.3+glitchDiscover If Your Email Was Exposed in Data Breaches. Created and maintained by @DevaOnBreaches@infosec.exchange
@XposedOrNot@infosec.exchange += Aura Data Breach
The Aura #databreach occurred in March 2026 when the online safety service disclosed a breach involving data linked to a marketing tool from an acquired company, exposing 922K unique email addresses and associated information.
Exposed data: Email addresses, Names, Phone numbers, Physical addresses, IP addresses
Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += Cal AI Data Breach
The Cal AI #databreach occurred in March 2026 and exposed over 3M user records from the AI-powered calorie tracking app, including more than 2.8M unique email addresses and associated profile information.
Exposed data: Email addresses, Names, Dates of birth, Genders, Usernames, Linked social media profiles
Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += Association Nationale des Premiers Secours (ANPS) Data Breach
The Association Nationale des Premiers Secours (ANPS) #databreach occurred in January 2026 when data was posted to a hacking forum, exposing 5.6K unique email addresses and associated personal information.
Exposed data: Email addresses, Names, Dates of birth, Places of birth
Potential risks: Identity theft, Phishing, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += Ggumim(Decorating the House) Data Breach
The Ggumim #databreach occurred in March 2020, when the Korean interior decoration website ggumim.co.kr was compromised, affecting nearly 1.3M members, and the data was later widely shared online.
Exposed data: Email addresses, Names, Usernames, Phone numbers
Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += BitView Data Breach
The BitView #databreach occurred in December 2024 and exposed 63K user records from the video-sharing community.
Exposed data: Email addresses, IP addresses, Usernames, Passwords (bcrypt hashes), Gender, Dates of birth, Countries
Potential risks: Account takeover, Credential stuffing, Phishing, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += Figure Data Breach
The Figure #databreach occurred in February 2026 after a social engineering attack led to customer data being publicly posted online, exposing around 970K unique email addresses and associated personal information.
Exposed data: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth
Potential risks: Identity theft, Phishing, Financial fraud, Account takeover, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += TheSqua.re Data Breach
The TheSqua.re #databreach occurred in June 2025 when 107K unique customer email addresses were allegedly obtained and later posted to a popular hacking forum, along with additional personal details.
Exposed data: Email addresses, Names, Phone numbers, Cities
Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += Odido Data Breach
The Odido #databreach occurred in February 2026 and involved a breach followed by an extortion attempt, with 2M records published across multiple leaks exposing 893K unique email addresses and associated customer information.
Exposed data: Email addresses, Names, Physical addresses, Phone numbers, Bank account numbers, Customer service notes, Dates of birth, Passport numbers, Driver’s license numbers
Potential risks: Identity theft, Financial fraud, Phishing, Account takeover, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += Pass'Sport Data Breach
The Pass'Sport #databreach occurred in December 2025 when data was posted to a popular hacking forum, exposing personal information from the French government sports subsidy program.
Exposed data: Names, Phone numbers, Genders, Physical addresses
Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += MSI Data Breach
The MSI #databreach occurred in July 2024 when RMA warranty claim data was found publicly accessible, impacting 250K unique email addresses along with associated customer records.
Exposed data: Email addresses, Names, Phone numbers, Physical addresses, Warranty claim details
Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches, Financial fraud
@XposedOrNot@infosec.exchange += Success Data Breach
The Success #databreach occurred in March 2026 and exposed 142K unique email addresses along with associated personal and order information, with the system also abused to send offensive newsletters.
Exposed data: Email addresses, Names, IP addresses, Phone numbers, Passwords (bcrypt hashes), Physical addresses, Payment methods
Potential risks: Phishing, Identity theft, Account takeover, Credential stuffing, Financial fraud, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += Infinite Campus Data Breach
The Infinite Campus #databreach occurred in March 2026 and exposed 137K records from the education technology platform, including sensitive personal and account information.
Exposed data: Email addresses, Phone numbers, Names, Physical addresses, Usernames, Dates of birth, Genders, Geographic locations, Passwords
Potential risks: Identity theft, Account takeover, Credential stuffing, Phishing, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += CFGI Data Breach
The CFGI #databreach occurred in March 2026 and exposed over 800K records, including more than 40K financial documents and internal corporate data, with 250K unique email addresses impacted.
Exposed data: Email addresses, Names, Phone numbers, Physical addresses, Usernames, Geographic locations, Financial documents, Internal corporate data
Potential risks: Identity theft, Financial fraud, Phishing, Targeted scams, Privacy breaches
XposedOrNot += BreachForums Version 5 Data Breach
The BreachForums Version 5 #databreach occurred in March 2026 when the hacking forum was publicly exposed, leaking 340K unique email addresses along with associated account data.
Exposed data: Email addresses, Usernames, Passwords (Argon2 hashes)
Potential risks: Account takeover, Credential stuffing, Phishing, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += Gravatar Data Breach
The Gravatar #databreach occurred in 2020 when an unauthorized party accessed user data, exposing hashed email addresses and usernames, with a portion of the hashes later cracked.
Exposed data: Hashed email addresses, Usernames
Potential risks: Phishing, Targeted scams, and privacy breaches
@XposedOrNot@infosec.exchange += HumanizerPro Data Breach
The HumanizerPro #databreach occurred in March 2026 when data was exposed via a publicly accessible source, affecting over 65K users and leaking email addresses along with user-generated content.
Exposed data: Email addresses, Full input histories, User-submitted prompts, Rewritten texts
Potential risks: Phishing, Targeted scams, and privacy breaches
@XposedOrNot@infosec.exchange += TLDRtech Data Breach
The TLDRtech #databreach occurred in March 2026, when data was exposed via an Apollo enrichment API endpoint, resulting in the exposure of over 1.2M user records, including associated profile information.
Exposed data: Email addresses, Names, Usernames, Geographic locations, Linked social media profiles
Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += Cuties AI Data Breach
The Cuties AI #databreach occurred in March 2026 when the NSFW AI companion platform was compromised, with data later published on a public hacking forum exposing 153K unique email addresses and associated user content.
Exposed data: Email addresses, Display names, Avatars, Prompts and descriptions, URLs to generated content
Potential risks: Phishing, Targeted scams, and privacy breaches
@XposedOrNot@infosec.exchange += SongTrivia2 Data Breach
The SongTrivia2 #databreach occurred in April 2026 when the platform was compromised, with data later published on a public hacking forum exposing 291K unique email addresses and associated account information.
Exposed data: Email addresses, Names, Usernames, Passwords (bcrypt hashes)
Potential risks: Account takeover, Credential stuffing, Phishing, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += Thermomix owners’ recipe forum Data Breach
The Rezeptwelt #databreach occurred in January 2025 and exposed details of 3.1M registered users of the Thermomix owners’ recipe forum.
Exposed data: Names, Email addresses, Physical addresses, Phone numbers, Dates of birth
@XposedOrNot@infosec.exchange += APOIA.se Data Breach
The APOIA.se #databreach occurred in December 2025 when the platform’s database was posted to an online forum, later confirmed in January 2026, exposing 451K unique email addresses and associated user information.
Exposed data: Email addresses, Names, Physical addresses
Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += VimeWorld Data Breach
The VimeWorld #databreach occurred in October 2018 when the Russian Minecraft server network was compromised, with 3.1M records later posted to a hacking forum.
Exposed data: Usernames, Email addresses, IP addresses, Passwords (MD5 hashes, bcrypt hashes)
Potential risks: Account takeover, Credential stuffing, Phishing, Targeted scams, Privacy breaches
@XposedOrNot@infosec.exchange += Hallmark Data Breach
The Hallmark #databreach occurred in March 2026 and involved an alleged breach and extortion incident impacting data stored in Salesforce, with 1.8M unique email addresses later published along with associated customer information.
Exposed data: Email addresses, Names, Phone numbers, Physical addresses
Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches