Have I Been Pwned

New sensitive breach: German political party AfD suffered a breach last month that resulted in hundreds of thousands of emails and attachments being published, exposing 345k unique email addresses. 47% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/AfD

New breach: Assurance Retraite suffered a breach in 2024 exposing 370k assistance beneficiaries with 70k unique email addresses. Data also included name, address, phone and French social security numbers (NIR). 59% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Assur...

New breach: Gîtes de France suffered a breach in May which exposed 118k unique email addresses alongside names, phone numbers, physical addresses and booking details. 76% of addresses were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Gites...

New breach: In January, ShinyHunters targeted Crunchbase in a "pay or leak" extortion campaign. Published data included 560k email addresses, names, phone numbers, physical addresses, job titles and employers. 53% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Crunc...

New breach: An August ShinyHunters extortion campaign against Sharecare allegedly exposed 318k email addresses, mostly business contacts, plus some Brazilian health plan member data. 73% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Share...

New breach: Neogen was targeted by ShinyHunters in August. Data allegedly stolen from the company was later published, including 436k unique email addresses, names and other mostly corporate contact details. 59% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Neogen

New breach: CyrusOne faced a ShinyHunters extortion attempt in August. Alleged breach data was later published: 373k unique email addresses, names and largely corporate contact info for users and leads. 84% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Cyrus...

New breach: Discord server protection service Double Counter suffered a breach earlier this week due to a Metabase vulnerability. The data included 275k unique email addresses and Discord usernames. 25% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Doubl...

New breach: Angel One had 7.9M customer records breached in 2023, including 6.8M unique email addresses. Data included name, physical address, phone number, bank account number, PAN and portfolio holdings. 53% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Angel...

New sensitive breach: Swiss medical device company Medela was targeted in a ShinyHunters extortion attack this month. Allegedly breached data was later published, including 424k unique email addresses. 62% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Medela

New breach: The LimeLeads B2B marketing platform (now defunct) had 17.8M unique email addresses exposed in 2019. Largely corporate contact data also included phone number, job title, employer and location. 50% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/LimeL...

New breach: Burger King Russia had 3.2M unique email addresses exposed via the Mindbox marketing automation platform in 2024. Data also included names, phone numbers, genders, DoBs and geolocations. 60% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Burge...

New scrape: Last month, 4.6M email addresses from Chess[.]com were posted online with names, usernames and country, among other data. 99% were already in @haveibeenpwned.com, supporting the theory the data was scraped. Read more: haveibeenpwned.com/Breach/Chess...

New sensitive breach: McKesson was targeted in a ShinyHunters extortion campaign last month. Allegedly sourced data was later published with 6.4M emails from marketing campaigns, patients, staff and others. 66% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/McKes...

New breach: Manchester Airports Group was breached last month, with FulcrumSec later publishing 8.7M email addresses. Data included phone numbers, vehicle registrations, parking history and airport purchases. 62% were already in @haveibeenpwned. More: haveibeenpwned.com/Breach/Manch...

New breach: Questel was targeted in a ShinyHunters extortion campaign last month. Data allegedly from the company was published with 1.2M emails, names, employers, job titles, addresses and phone numbers. 51% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Questel

New breach: Carhartt was the target of a ShinyHunters extortion campaign earlier this month. Data allegedly obtained from the company was later published, including 12.9M unique email addresses. 83% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Carha...

New sensitive breach: German news service NIUS had 6k unique email addresses exposed in a breach last year. Data also included names, physical addresses, purchases and partial payment details. 51% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/NIUS

New breach: Golf Canada had 569k unique email addresses allegedly obtained from its service around the middle of this year. Data also included name, DoB, gender and appx geographic location. 76% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/GolfC...

New breach: Oz Hair and Beauty was targeted in an xpl0itrs extortion attack this week. Data allegedly obtained in the attack was subsequently leaked, including 2M email addresses and other personal data. 73% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/OzHai...

New breach: Fanlore suffered a breach earlier this month exposing 145k unique email addresses. Data also included usernames and passwords stored as either MD5 or PBKDF2 hashes. 23% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Fanlore

New breach: RingCentral was targeted in a ShinyHunters extortion attack last month. The group subsequently published 1.6M email addresses and other personal info allegedly from the company. 44% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/RingC...

New breach: Alcon was targeted in a ShinyHunters extortion campaign, with data allegedly from the eye care company published this month. It included 218k email addresses and largely corporate B2B contact info. 49% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Alcon

New breach: Last month, Brinks Home was targeted by a ShinyHunters extortion, who later published 732k unique email addresses allegedly taken in the breach. Data included purchases and partial card data. 78% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Brink...

New sensitive breach: Exact Sciences was targeted by a ShinyHunters extortion campaign last month. The group later published 10.9M email addresses and other personal data, including health information. 75% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Exact...

New breach: Inter-Con Security was targeted by ShinyHunters in a pay or leak extortion campaign in June. 276k unique email addresses were subsequently published, along with names, physical addresses and more. 44% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Inter...

New breach: SplitVPN had 865k unique email addresses breached last week. Data also included IP address, country and partial payment card data. 37% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Split...

New breach: Houston City College was the target of a ShinyHunters extortion attempt last month. Over 800k unique email addresses were later published with name, physical address, phone number and more. 30% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Houst...

New breach: Data from Suno's November 2025 breach surfaced publicly last week. The corpus contained over 55M unique email addresses plus tens of thousands of Stripe payment records. 24% were already in @haveibeenpwned. More: haveibeenpwned.com/Breach/Suno

New breach: Paidwork allegedly suffered a breach in March that was offered for sale before being published this month. Data included profile data, banking info, payout history and bcrypt password hashes. 35% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Paidw...

New breach: Earlier this month, Fluke was targeted in a ShinyHunters extortion campaign. The group published more than 800k email addresses along with largely corporate contact information and support cases. 51% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Fluke

New breach: Last month, some Goose Creek customers received emails claiming a vulnerability and breach. Data later sent to HIBP contained 6.6M email addresses, names, phone numbers and physical addresses. 84% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Goose...

New breach: Glendale Community College was the target of a ShinyHunters extortion attempt last month. Nearly 800k unique email addresses were later published with name, physical address, phone number and more. 28% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Glend...

New breach: Moody Bible Institute was targeted by a ShinyHunters extortion campaign last month with 2.3M email addresses later published. Data also included name, address, phone and other personal info. 76% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Moody...

New breach: Sysco was the target of a ShinyHunters extortion campaign earlier this month. Subsequently published data contained 2.7M unique email addresses plus largely corporate contact information. 44% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Sysco

New breach: American Tower was the target of a ShinyHunters extortion campaign earlier this month. Leaked data included 217k unique email addresses along with names, phone numbers, and addresses. 62% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Ameri...

New breach: Madison Square Garden Sports was the target of a ShinyHunters extortion campaign earlier this month. Almost 10M email addresses and extensive staff and customer relationship data was later published. 80% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Madis...

New breach: JCPenney was targeted by a ShinyHunters extortion campaign that allegedly obtained then leaked data including 368k email addresses, names, SSNs and other HR records on current and former staff. 31% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/JCPen...

New breach: Ralph Lauren was targeted in a ShinyHunters "pay or leak" extortion campaign. This week, the group published 140k email addresses, names, phone numbers and other personal data. 85% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Ralph...

New breach: CFGI was targeted in a ShinyHunters extortion campaign in March. They subsequently published 243k unique email addresses along with names and largely corporate contact information. 53% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/Breach/CFGI

New stealer log corpus: A collection of hundreds of millions of stealer log records containing 56M unique email addresses has been added. The data also contained 124M unique passwords added to Pwned Passwords. 86% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/June2...

New breach: Berkadia was targeted by a ShinyHunters "pay or leak" extortion campaign in March. They subsequently published over 300k unique email addresses allegedly taken from the company's Salesforce instance. 76% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Berka...

New breach: Infinite Campus was targeted in a ShinyHunters "pay or leak" extortion campaign in March. Data included 137k unique email addresses along with name, phone number, physical address and support tickets. 76% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Infin...

New breach: The University of Nottingham was targeted in a ShinyHunters extortion campaign exposing 455k email addresses this week. Data included name, address, phone, ethnicity, disability & academic enrolment info. 47% were already in @haveibeenpwned.com haveibeenpwned.com/Breach/Unive...

New breach: Baker Distributing had 103k unique email addresses allegedly exposed after appearing on the ShinyHunters "pay or leak" site. The data was mostly corporate contact info including names, addresses and phones. 50% were already in @haveibeenpwned.com: haveibeenpwned.com/Breach/Baker...

New breach: BCD Travel was targeted in a ShinyHunters extortion campaign that published 396k email addresses this week. Other data included name, address, phone, job title and support tickets. 28% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/BCDTr...

New breach: DentaQuest was targeted by a ShinyHunters extortion campaign that saw 2.6M unique email addresses published last weekend. Data also included name, phone, address and for some records, Medicaid ID. 66% were already in @haveibeenpwned.com . More: haveibeenpwned.com/Breach/Denta...