Have I Been Pwned
@haveibeenpwned.com
Check if you have an email address or password that has been compromised in a data breach. Created and maintained by @troyhunt.com.
New breach: SplitVPN had 865k unique email addresses breached last week. Data also included IP address, country and partial payment card data. 37% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Split...
Have I Been Pwned: SplitVPN Data Breach
In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impa...
haveibeenpwned.com
New breach: Houston City College was the target of a ShinyHunters extortion attempt last month. Over 800k unique email addresses were later published with name, physical address, phone number and more. 30% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Houst...
Have I Been Pwned: Houston City College Data Breach
In June 2026, Houston City College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from the college was later published publicly and included 832k unique ema...
haveibeenpwned.com
New breach: Data from Suno's November 2025 breach surfaced publicly last week. The corpus contained over 55M unique email addresses plus tens of thousands of Stripe payment records. 24% were already in @haveibeenpwned. More: haveibeenpwned.com/Breach/Suno
Have I Been Pwned: Suno Data Breach
In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year. The data contained over 55M unique email addresses. Phone numbers were also ...
haveibeenpwned.com
New breach: Paidwork allegedly suffered a breach in March that was offered for sale before being published this month. Data included profile data, banking info, payout history and bcrypt password hashes. 35% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Paidw...
Have I Been Pwned: Paidwork Data Breach
In March 2026, hackers claimed they had obtained data from the gig economy platform Paidwork which they then listed for sale. Almost 11GB of data allegedly obtained from the platform was subsequently ...
haveibeenpwned.com
New breach: Earlier this month, Fluke was targeted in a ShinyHunters extortion campaign. The group published more than 800k email addresses along with largely corporate contact information and support cases. 51% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Fluke
Have I Been Pwned: Fluke Data Breach
In July 2026, electronic test and measurement equipment company Fluke was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published more than 100GB of data allegedl...
haveibeenpwned.com
New breach: Last month, some Goose Creek customers received emails claiming a vulnerability and breach. Data later sent to HIBP contained 6.6M email addresses, names, phone numbers and physical addresses. 84% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Goose...
Have I Been Pwned: Goose Creek Data Breach
In June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company's customers, claiming the company had a security vulnerability and suffered...
haveibeenpwned.com
New breach: Glendale Community College was the target of a ShinyHunters extortion attempt last month. Nearly 800k unique email addresses were later published with name, physical address, phone number and more. 28% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Glend...
Have I Been Pwned: Glendale Community College Data Breach
In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from Glendale was later published online and included almost 800k un...
haveibeenpwned.com
New breach: Moody Bible Institute was targeted by a ShinyHunters extortion campaign last month with 2.3M email addresses later published. Data also included name, address, phone and other personal info. 76% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Moody...
Have I Been Pwned: Moody Bible Institute Data Breach
In June 2026, Moody Bible Institute was targeted by a ShinyHunters "pay or leak" extortion campaign. Over 2.3M unique email addresses and other personal data were later published publicly, including n...
haveibeenpwned.com
New breach: Sysco was the target of a ShinyHunters extortion campaign earlier this month. Subsequently published data contained 2.7M unique email addresses plus largely corporate contact information. 44% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Sysco
Have I Been Pwned: Sysco Data Breach
In June 2026, the food distribution company Sysco was targeted by a ShinyHunters "pay or leak" extortion campaign. Data was subsequently published containing 2.7M unique email addresses belonging to s...
haveibeenpwned.com
New breach: American Tower was the target of a ShinyHunters extortion campaign earlier this month. Leaked data included 217k unique email addresses along with names, phone numbers, and addresses. 62% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Ameri...
Have I Been Pwned: American Tower Data Breach
In June 2026, telecommunications tower infrastructure company American Tower was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly taken fr...
haveibeenpwned.com
New breach: Madison Square Garden Sports was the target of a ShinyHunters extortion campaign earlier this month. Almost 10M email addresses and extensive staff and customer relationship data was later published. 80% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Madis...
Have I Been Pwned: Madison Square Garden Sports Data Breach
In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters "pay or leak" extortion campaign. The group later published the alleged data, which inc...
haveibeenpwned.com
New breach: JCPenney was targeted by a ShinyHunters extortion campaign that allegedly obtained then leaked data including 368k email addresses, names, SSNs and other HR records on current and former staff. 31% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/JCPen...
Have I Been Pwned: JCPenney Data Breach
In June 2026, retailer JCPenney and associated brands were targeted in a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from JCPenney through the exploitation of a critical zer...
haveibeenpwned.com
New breach: Ralph Lauren was targeted in a ShinyHunters "pay or leak" extortion campaign. This week, the group published 140k email addresses, names, phone numbers and other personal data. 85% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Ralph...
Have I Been Pwned: Ralph Lauren Data Breach
In June 2026, fashion retailer Ralph Lauren was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published hundreds of gigabytes of data they claimed was obtained fr...
haveibeenpwned.com
New breach: The 4th wave of Operation Endgame targeting the SocGholish malware operation resulted in authorities providing 154k email addresses and more than half a million previously unseen passwords to HIBP. 86% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Opera...
Have I Been Pwned: Operation Endgame 4.0 Data Breach
On 18 June 2026, the latest phase of Operation Endgame targeted the SocGholish malware operation, a prolific malware distribution network used to compromise systems and facilitate further cybercrime. ...
haveibeenpwned.com
New breach: CFGI was targeted in a ShinyHunters extortion campaign in March. They subsequently published 243k unique email addresses along with names and largely corporate contact information. 53% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/Breach/CFGI
Have I Been Pwned: CFGI Data Breach
In March 2026, the financial consulting and advisory firm CFGI was the target of a ShinyHunters "pay-or-leak" extortion campaign. The group subsequently publicised data allegedly obtained from CFGI co...
haveibeenpwned.com
New stealer log corpus: A collection of hundreds of millions of stealer log records containing 56M unique email addresses has been added. The data also contained 124M unique passwords added to Pwned Passwords. 86% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/June2...
Have I Been Pwned: June 2026 Stealer Logs Data Breach
In June 2026, a collection of accumulated stealer logs from various sources was added to HIBP. The corpus comprised 56M unique email addresses across 144M stealer log records. The data also contained ...
haveibeenpwned.com
New breach: Berkadia was targeted by a ShinyHunters "pay or leak" extortion campaign in March. They subsequently published over 300k unique email addresses allegedly taken from the company's Salesforce instance. 76% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Berka...
Have I Been Pwned: Berkadia Data Breach
In March 2026, the commercial real estate finance company Berkadia was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from ...
haveibeenpwned.com
New breach: Infinite Campus was targeted in a ShinyHunters "pay or leak" extortion campaign in March. Data included 137k unique email addresses along with name, phone number, physical address and support tickets. 76% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Infin...
Have I Been Pwned: Infinite Campus Data Breach
In March 2026, the student information system Infinite Campus was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from Infinit...
haveibeenpwned.com
New breach: The University of Nottingham was targeted in a ShinyHunters extortion campaign exposing 455k email addresses this week. Data included name, address, phone, ethnicity, disability & academic enrolment info. 47% were already in @haveibeenpwned.com haveibeenpwned.com/Breach/Unive...
Have I Been Pwned: University of Nottingham Data Breach
In June 2026, the University of Nottingham was the target of a cyber attack, later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published onli...
haveibeenpwned.com
New breach: Baker Distributing had 103k unique email addresses allegedly exposed after appearing on the ShinyHunters "pay or leak" site. The data was mostly corporate contact info including names, addresses and phones. 50% were already in @haveibeenpwned.com: haveibeenpwned.com/Breach/Baker...
Have I Been Pwned: Baker Distributing Data Breach
In May 2026, the HVAC/R wholesale distributor Baker Distributing Company was added to the ShinyHunters data extortion group's "pay or leak" site. In early June, the group publicly published data they ...
haveibeenpwned.com
New breach: BCD Travel was targeted in a ShinyHunters extortion campaign that published 396k email addresses this week. Other data included name, address, phone, job title and support tickets. 28% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/BCDTr...
Have I Been Pwned: BCD Travel Data Breach
In May 2026, the corporate travel management company BCD Travel was claimed as a victim of the ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from BCD was subsequently publishe...
haveibeenpwned.com
New breach: DentaQuest was targeted by a ShinyHunters extortion campaign that saw 2.6M unique email addresses published last weekend. Data also included name, phone, address and for some records, Medicaid ID. 66% were already in @haveibeenpwned.com . More: haveibeenpwned.com/Breach/Denta...
Have I Been Pwned: DentaQuest Data Breach
In May 2026, the dental benefits administrator DentaQuest was the target of a ShinyHunters "pay or leak" extortion campaign that resulted in the group publicly publishing hundreds of gigabytes of data...
haveibeenpwned.com
New breach: Edmunds was listed by ShinyHunters as allegedly breached in Jan, with the data later published online. It contained 178k unique email addresses, usernames, IP addresses, phone numbers and passwords. 91% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Edmunds
Have I Been Pwned: Edmunds Data Breach
In January 2026, the automotive research and car-shopping platform Edmunds suffered a data breach claimed by the ShinyHunters hacking group. The exposed data was subsequently published publicly and in...
haveibeenpwned.com
New breach: The Atlas Menu GTA V and CS2 cheat service had 64k accounts breached yesterday. Data includes email and IP addresses, usernames, passwords stored as bcrypt hashes and support tickets. 49% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Atlas...
Have I Been Pwned: Atlas Menu Data Breach
In May 2026, the GTA V and CS2 cheat service Atlas Menu suffered a data breach. An attacker claimed to have gained access to all Atlas systems and published the service's database to a public GitHub r...
haveibeenpwned.com
New breach: Charter Communications was named in a ShinyHunters "pay or leak" extortion campaign last week after which 4.9M unique email addresses along with name, phone number and physical address were published. 68% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Charter
Have I Been Pwned: Charter Data Breach
In May 2026, the telecommunications company Charter Communications (the parent company behind the consumer broadband and cable brand Spectrum) was named by the ShinyHunters group in a "pay or leak" ex...
haveibeenpwned.com
New breach: Kemper was targeted by ShinyHunters last month in an extortion campaign resulting in 269k email addresses being published. Data also included names, phone numbers, addresses and partial card data. 53% were already in @haveibeenpwned. More: haveibeenpwned.com/Breach/Kemper
Have I Been Pwned: Kemper Data Breach
In April 2026, the American insurance holding company Kemper Corporation was named by the ShinyHunters ransomware group in a "pay or leak" extortion campaign. The attackers allegedly accessed Kemper's...
haveibeenpwned.com
New breach: Mytheresa was targeted by ShinyHunters in an extortion campaign last month. The leaked data contained 84k email addresses along with name, address, phone, purchase and partial card data. 97% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Mythe...
Have I Been Pwned: Mytheresa Data Breach
In April 2026, the luxury fashion e-commerce platform Mytheresa was listed as a victim of the ShinyHunters "pay or leak" extortion group. After the ransom deadline passed, the group publicly released ...
haveibeenpwned.com
New breach: Ameriprise was the victim of a ShinyHunters extortion campaign in March. The published data contained 500k email addresses along with names, phone numbers, physical addresses and employer info. 65% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Ameri...
Have I Been Pwned: Ameriprise Data Breach
In March 2026, the financial services firm Ameriprise Financial was named by the ShinyHunters group in a "pay or leak" extortion campaign. The group claimed possession of more than 200GB of compressed...
haveibeenpwned.com
New breach: 7-Eleven was targeted by the ShinyHunters extortion group last month, with 185k email addresses related to franchisees impacted. Data also included name, physical address, phone number and DoB. 53% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/7-Ele...
Have I Been Pwned: 7-Eleven Data Breach
In April 2026, 7-Eleven was the victim of a "pay or leak" extortion campaign by ShinyHunters, with the data later published that month. The incident exposed 185k unique email addresses, along with nam...
haveibeenpwned.com
New breach: The Dragonica Lunaris private server suffered a breach in December which exposed 126k email addresses, usernames, dates of birth and bcrypt password hashes. 69% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/Breach/Drago...
Have I Been Pwned: Dragonica Lunaris Data Breach
In December 2025, theEuropean Dragonica private server Dragonica Lunaris suffered a data breach. The incident exposed 126k email addresses, usernames, dates of birth and bcrypt password hashes. The s...
haveibeenpwned.com