Resmî İhlal Bildirimleri
Çetelerin iddiaları değil; kurumların, düzenleyicilerin ve doğrulanmış kayıtların açıkladığı veri ihlalleri.
TNAFlix
In June 2022, the adult website TNAFlix suffered a data breach that was later redistributed as part of a larger corpus of data . The data included 1.4M records of email and IP addresses, usernames and plain text passwords.
VimeWorld
In October 2018, the Russian Minecraft service VimeWorld suffered a data breach that was later redistributed as part of a larger corpus of data . The data included 3.1M records of usernames, email and IP addresses and passwords stored as either MD5 or bcrypt hashes.
StreamCraft
In July 2020, the Russian Minecraft service StreamCraft suffered a data breach that was later redistributed as part of a larger corpus of data . The data included 1.8M records of usernames, email and IP addresses and passwords stored as either MD5 or bcrypt hashes.
The Club Penguin Experience
In October 2024, The Club Penguin Experience (TCPE) suffered a data breach . The incident exposed over 6k subscribers' email addresses alongside usernames, age groups, passwords stored as bcrypt hashes and in some cases, plain text password hints. TCPE sent prompt disclosure notices to impacted customers following the breach.
digiDirect
In September 2024, a data breach sourced from the Australian retailer digiDirect was published to a popular hacking forum . The breach exposed over 300k rows of data including email and physical address, name, phone number and date of birth. Approximately half the email addresses were on domains from external marketplaces including Amazon, eBay and Westfield.
Fair Vote Canada
In March 2024, the Canadian national citizens' campaign for proportional representation Fair Vote Canada suffered a data breach . The incident was attributed to "a well-meaning volunteer" who inadvertently exposed data from 2020 which included 134k unique email addresses, names, physical addresses, phone numbers and, for some individuals, date and amount of a donation.
AlpineReplay
In 2019, the snow sports tracking app AlpineReplay suffered a data breach that exposed 900k unique email addresses. Later rolled into the Trace service, the breach included names, usernames, genders, dates of birth, weights and passwords stored as either unsalted MD5 or bcrypt hashes.
Internet Archive
In September 2024, the digital library of internet sites Internet Archive suffered a data breach that exposed 31M records . The breach exposed user records including email addresses, screen names and bcrypt password hashes.
Muah.AI
In September 2024, the "AI girlfriend" website Muah.AI suffered a data breach . The breach exposed 1.9M email addresses alongside prompts to generate AI-based images. Many of the prompts were highly sexual in nature, with many also describing child exploitation scenarios.
Switch
In October 2024, the Hungarian IT headhunting service Switch inadvertently exposed thousands of customer records via a public GitHub repository . The exposed data contained job applications with names, email addresses and in some cases, commentary on the applicant.
BudTrader
In July 2024, a data breach of the now defunct cannabis social platform BudTrader was posted for sale on a hacking forum . Dating back to the previous month, the breach of the website exposed 2.7M email addresses, usernames and WordPress password hashes.
Central Tickets
In September 2024, data from the ticketing service Central Tickets was publicly posted to a hacking forum . The data suggests the breach occurred several months earlier and exposed 723k unique email addresses alongside names, phone numbers, IP addresses, purchases and passwords stored as unsalted SHA-1 hashes.
GameVN
In May 2016, the Vietnamese gaming forum GameVN suffered a data breach that was later redistributed as part of a larger corpus of data . Data breached from the XenForo-based forum included 1.4M unique email addresses, usernames, IP addresses and salted MD5 password hashes.
HuntStand
In March 2024, millions of records scraped from the hunting and land management service HuntStand were publicly posted to a popular hacking forum . The data included 2.8M unique email addresses with many records also containing name, date of birth and country.
Instituto Nacional de Deportes de Chile
In September 2024, the Instituto Nacional de Deportes de Chile (Chile's National Sports Institute) suffered a data breach . The incident exposed 1.7M rows of data with 320k unique email addresses alongside names, dates of birth, genders and bcrypt password hashes. The newest records in the data date back to August 2022, suggesting the breach may be of an older data set.
Games Box
In September 2020, now defunct website Games Box suffered a data breach that was later redistributed as part of a larger corpus of data . The impacted data included 1.4M email addresses alongside usernames, genders, ages and passwords stored as either a hash or plain text.
Blooms Today
In April 2024, 15M records from the online florist Blooms Today were listed for sale on a popular hacking forum . The most recent data in the breach corpus was from November 2023 and appeared alongside 3.2M unique email addresses, names, phone numbers physical addresses and partial credit card data (card type, 4 digits of the number and expiry date). The breach did not expose sufficient card data to make purchases. Blooms Today did not respond when contacted about the incident.
HALLIBURTON CO
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
Market Moveis
In August 2023, the Portuguese home decor company Market Moveis suffered a data breach that impacted 28k records. The exposed records were limited to names and email addresses.
Lookiero
In August 2024, a data breach from the online styling service Lookiero was posted to a popular hacking forum . Dating back to March 2024, the data included 5M unique email addresses, with many of the records also including name, phone number and physical address. When contacted about the incident, Lookiero advised that they would "look into it and get back to you if necessary".
1.184 bildirim · sayfa 20 / 60
İhlal bildirimlerini API ile izleyin
Ücretsiz API anahtarıyla aynı veriyi panonuza, betiklerinize veya kendi uygulamanıza alabilirsiniz.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/breaches?source=kvkk"