Troy Hunt
@troyhunt.com
Founder & CEO of @haveibeenpwned.com, the most trusted name in data breach intelligence. Speaker, blogger, Microsoft Regional Director. Gold Coast, Australia.
Weekly update is up! Seeking Caffeine Utopia: Levelling up the Coffee Game with Customised Synesso MVP Hydra; HIBP Roadmap - What Are We Missing? www.troyhunt.com/weekly-updat...
Weekly Update 515
Apparently, Aussies are so obsessed with coffee that it's referred to as the coffee capital of the world down here (some bits, at least). "But what about Italy?" people ask. Having spent a lot of…
troyhunt.com
We're very happy to welcome the 47th government to @haveibeenpwned.com, Nepal! Their National Cyber Security Centre now has free access to breach intelligence data affecting all their gov domains: www.troyhunt.com/welcoming-th...
Welcoming the Nepalese Government to Have I Been Pwned
Today, we welcome the 47th government onboarded to Have I Been Pwned’s free gov service: Nepal. Their National Cyber Security Centre now has access to monitor Nepalese government domains against the d...
troyhunt.com
Going live with my weekly vid in 5 mins! Weekly Update 515: Seeking Caffeine Utopia: Levelling up the Coffee Game with Customised Synesso MVP Hydra; HIBP Roadmap - What Are We Missing? youtube.com/live/uRRCXlS...
Weekly Update 515: Seeking Caffeine Utopia
Levelling up the Coffee Game with Customised Synesso MVP Hydra; HIBP Roadmap - What Are We Missing?
youtube.com
New breach: SplitVPN had 865k unique email addresses breached last week. Data also included IP address, country and partial payment card data. 37% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Split...
Have I Been Pwned: SplitVPN Data Breach
In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impa...
haveibeenpwned.com
New breach: Houston City College was the target of a ShinyHunters extortion attempt last month. Over 800k unique email addresses were later published with name, physical address, phone number and more. 30% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Houst...
Have I Been Pwned: Houston City College Data Breach
In June 2026, Houston City College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from the college was later published publicly and included 832k unique ema...
haveibeenpwned.com
Weekly update is up! This Week in Data Breaches: Origin Energy, OpenAI & Hugging Face, Suno; Whatever Happened to ShinyHunters? www.troyhunt.com/weekly-updat...
Weekly Update 514: This Week in Data Breaches
The Origin Energy breach down here in Aus is all over the news this week, and as with many breaches, it's multi-faceted. You've got them leading with "don't worry, your credit card is fine", the…
troyhunt.com
Updated breach: Another 131k email addresses provided by Europol were added to the 4th wave of Operation Endgame today. 36% of the new corpus was already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Opera...
Have I Been Pwned: Operation Endgame 4.0 Data Breach
On 18 June 2026, the latest phase of Operation Endgame targeted the SocGholish malware operation, a prolific malware distribution network used to compromise systems and facilitate further cybercrime. ...
haveibeenpwned.com
Going live with my weekly vid in 5 mins! This Week in Data Breaches: Origin Energy, OpenAI & Hugging Face, Suno; Whatever Happened to ShinyHunters? youtube.com/live/loyRYRP...
Weekly Update 514: This Week in Data Breaches
This Week in Data Breaches: Origin Energy, OpenAI & Hugging Face, Suno; Whatever Happened to ShinyHunters?
youtube.com
Weekly update is up! Clauding The Home Network: Claude + UniFi MCP + Home Assistant MCP + Pi-Hole API = Success? www.troyhunt.com/weekly-updat...
Weekly Update 513: Clauding The Home Network
I reckon this week's video on how Claude is tying together info from UniFi, Home Assistant and the Pi-Hole is an absolute ripper. Or at least the concept is - if ever there was an actual value…
troyhunt.com
New breach: Data from Suno's November 2025 breach surfaced publicly last week. The corpus contained over 55M unique email addresses plus tens of thousands of Stripe payment records. 24% were already in @haveibeenpwned. More: haveibeenpwned.com/Breach/Suno
Have I Been Pwned: Suno Data Breach
In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year. The data contained over 55M unique email addresses. Phone numbers were also ...
haveibeenpwned.com
New breach: Paidwork allegedly suffered a breach in March that was offered for sale before being published this month. Data included profile data, banking info, payout history and bcrypt password hashes. 35% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Paidw...
Have I Been Pwned: Paidwork Data Breach
In March 2026, hackers claimed they had obtained data from the gig economy platform Paidwork which they then listed for sale. Almost 11GB of data allegedly obtained from the platform was subsequently ...
haveibeenpwned.com
Going live with my weekly vid in 10 mins! Clauding The Home Network: Claude + UniFi MCP + Home Assistant MCP + Pi-Hole API = Success? youtube.com/live/ZGkOql9...
Weekly Update 513: Clauding The Home Network
Claude + UniFi MCP + Home Assistant MCP + Pi-Hole API = Success?
youtube.com
New breach: Earlier this month, Fluke was targeted in a ShinyHunters extortion campaign. The group published more than 800k email addresses along with largely corporate contact information and support cases. 51% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Fluke
Have I Been Pwned: Fluke Data Breach
In July 2026, electronic test and measurement equipment company Fluke was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published more than 100GB of data allegedl...
haveibeenpwned.com
Weekly update is up! IoT Lockout Fail: Home to Aussie Sunshine; Locked Out by Failed IoT Lock; The Post-holiday Tech Fixes www.troyhunt.com/weekly-updat...
Weekly Update 512: IoT Lockout Fail
"Build a smart home", they said. "It'll make life so much better", they said. Well, life wasn't very bloody good at 23:00 the other night after travelling 33 hours from Paris only to find the IoT…
troyhunt.com
New breach: Last month, some Goose Creek customers received emails claiming a vulnerability and breach. Data later sent to HIBP contained 6.6M email addresses, names, phone numbers and physical addresses. 84% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Goose...
Have I Been Pwned: Goose Creek Data Breach
In June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company's customers, claiming the company had a security vulnerability and suffered...
haveibeenpwned.com
Considering making the long trek from Aus to Vegas for the annual cyber things next month. But it’s a long way and we’ve had loads of recent travel, anything amazing happening that could convince us to pull the trigger?
Going live with my weekly vid in a few mins! Weekly Update 511: IoT Lockout Fail - Home to Aussie Sunshine; Locked Out by Failed IoT Lock; The Post-holiday Tech Fixes youtube.com/live/GN7Xmsr...
Weekly Update 511: IoT Lockout Fail
Home to Aussie Sunshine; Locked Out by Failed IoT Lock; The Post-holiday Tech Fixes
youtube.com
New breach: Glendale Community College was the target of a ShinyHunters extortion attempt last month. Nearly 800k unique email addresses were later published with name, physical address, phone number and more. 28% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Glend...
Have I Been Pwned: Glendale Community College Data Breach
In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from Glendale was later published online and included almost 800k un...
haveibeenpwned.com
Weekly update is up! Live from my Riad in Marrakech: Spain, Italy and Morocco Travels; Swimming Pools, Pee & Data Breaches; I’m Pwned Again www.troyhunt.com/weekly-updat...
Weekly Update 511: Live from my Riad in Marrakech
How's this for a location?! I mean, last week was nice with Scott in Mallorca, but Marrakech is, well, wow 😮 Anyway, about those data breaches... This week I'm talking about the futility of…
troyhunt.com
Going live with my weekly vid… now! Live from my Riad in Marrakech: Spain, Italy and Morocco Travels; Swimming Pools, Pee & Data Breaches; I’m Pwned Again: www.youtube.com/live/_TfYZuI...
Weekly Update 511: Live from my Riad in Marrakech
Spain, Italy and Morocco Travels; Swimming Pools, Pee & Data Breach...
youtube.com
New breach: Moody Bible Institute was targeted by a ShinyHunters extortion campaign last month with 2.3M email addresses later published. Data also included name, address, phone and other personal info. 76% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Moody...
Have I Been Pwned: Moody Bible Institute Data Breach
In June 2026, Moody Bible Institute was targeted by a ShinyHunters "pay or leak" extortion campaign. Over 2.3M unique email addresses and other personal data were later published publicly, including n...
haveibeenpwned.com
Just blogged: Swimming Pools, Pee, and Trying to Delete Your Data From the Internet: www.troyhunt.com/swimming-poo...
Swimming Pools, Pee, and Trying to Delete Your Data From the Internet
I can't recall if someone else originally came up with this saying or if I said it in some off-the-cuff comment and it just propagated, but since it's often attributed back to me, I'll relay it here…
troyhunt.com
Weekly update is up! Live From Mallorca with @scotthelme.bsky.social - We’re talking passkeys and Claude Code: www.troyhunt.com/weekly-updat...
Weekly Update 510: Live From Mallorca with Scott Helme
How's the view?! Back to business, it's now 8 years ago that Scott and I thought it would be a cool idea to build Why no HTTPS? We used the site to shame companies for not implementing their transport...
troyhunt.com
New breach: Sysco was the target of a ShinyHunters extortion campaign earlier this month. Subsequently published data contained 2.7M unique email addresses plus largely corporate contact information. 44% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Sysco
Have I Been Pwned: Sysco Data Breach
In June 2026, the food distribution company Sysco was targeted by a ShinyHunters "pay or leak" extortion campaign. Data was subsequently published containing 2.7M unique email addresses belonging to s...
haveibeenpwned.com
We’re now live with my weekly vid! I’m with Scott Helme in Mallorca talking passkeys and Claude Code www.youtube.com/live/AaWU8w-...
- YouTube
Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.
youtube.com
New breach: American Tower was the target of a ShinyHunters extortion campaign earlier this month. Leaked data included 217k unique email addresses along with names, phone numbers, and addresses. 62% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Ameri...
Have I Been Pwned: American Tower Data Breach
In June 2026, telecommunications tower infrastructure company American Tower was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly taken fr...
haveibeenpwned.com
Updated breach: A further 4M email addresses and 9M passwords from the StealC malware operation targeted by the 4th wave of Operation Endgame have been added to HIBP. 64% of the combined corpus was already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Opera...
Have I Been Pwned: Operation Endgame 4.0 Data Breach
On 18 June 2026, the latest phase of Operation Endgame targeted the SocGholish malware operation, a prolific malware distribution network used to compromise systems and facilitate further cybercrime. ...
haveibeenpwned.com
New breach: Madison Square Garden Sports was the target of a ShinyHunters extortion campaign earlier this month. Almost 10M email addresses and extensive staff and customer relationship data was later published. 80% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Madis...
Have I Been Pwned: Madison Square Garden Sports Data Breach
In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters "pay or leak" extortion campaign. The group later published the alleged data, which inc...
haveibeenpwned.com
Weekly update is up! Home Cinema Madness: We’re Building a Home Cinema from the Ground up - Have We Gone Overboard?! www.troyhunt.com/weekly-updat...
Weekly Update 509
I know enough about home cinema audiovisual to know there's a lot I don't know. It's conscious incompetence, if you like, which is different to the unconscious incompetence most people have on the…
troyhunt.com
New breach: JCPenney was targeted by a ShinyHunters extortion campaign that allegedly obtained then leaked data including 368k email addresses, names, SSNs and other HR records on current and former staff. 31% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/JCPen...
Have I Been Pwned: JCPenney Data Breach
In June 2026, retailer JCPenney and associated brands were targeted in a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from JCPenney through the exploitation of a critical zer...
haveibeenpwned.com