Breach Intelligence

2,850

Total breached databases

In 2021, RCTank Warfare allegedly suffered a data breach. RCTank Warfare is an online forum dedicated to enthusiasts of RC tank models, offering a community space for discussions, advice, and sharing related to remotely controlled tank models. Reports suggest that approximately 7,800 records were compromised during the incident. The data exposed includes email addresses, usernames, IP addresses, site activity, social profiles, websites, birthdates, and hashed passwords using PHPass and SHA-1.
  • Data: Email Addresses Passwords Usernames IP Addresses Site Activity Social Profiles Websites Birthdates
  • Imported:
  • Records Imported: 7,762
  • Number of lines: 7,868
  • Size: 6.92 MB
  • Passwords: PHPass, SHA-1
  • Cracked: 0%
In 2016, RawPorn.org allegedly suffered a data breach. RawPorn.org was an adult entertainment website offering a variety of pornographic content. Reports suggest that approximately 28,000 records were exposed. The leaked data included email addresses, usernames, IP addresses, site activity, linked social profiles, and birthdates. Additionally, the breached passwords were stored using vBulletin hashing.
  • Date: 2016
  • Domain: rawporn.org
  • Category: Pornography
  • Records Announced: 28,411
  • Data: Email Addresses Passwords Usernames IP Addresses Site Activity Social Profiles Birthdates
  • Imported:
  • Records Imported: 28,410
  • Number of lines: 28,513
  • Size: 15.02 MB
  • Passwords: vBulletin
  • Cracked: 0%
In December 2025, the streaming music service Raaga (raaga.com), which offers a variety of Indian music genres, allegedly experienced a data breach. Reports suggest that approximately 10,252,000 records were compromised. The data exposed included email addresses, names, phone numbers, geographic locations, usernames, genders, site activity, birthdates, and passwords stored as unsalted MD5 hashes.
  • Date: Dec 15, 2025
  • Domain: raaga.com
  • Country: India
  • Category: Streaming & Entertainment
  • Records Announced: 10,225,145
  • Source: haveibeenpwned.com
  • Data: Birthdates Email Addresses Genders Geographic Locations Names Passwords Phone Numbers Site Activity Usernames
  • Imported:
  • Records Imported: 10,251,664
  • Number of lines: 10,251,665
  • Size: 7.07 GB
  • Passwords: MD5
  • Cracked: 0%
In 2014, Quantumstresser.net allegedly suffered a data breach. Quantum Stresser is a website known for providing Distributed Denial of Service (DDoS) attack services. Reports suggest that approximately 19,000 records were exposed during the incident. The compromised data includes email addresses, passwords, usernames, IP addresses, and site activity.
  • Data: Email Addresses Passwords Usernames IP Addresses Site Activity
  • Imported:
  • Records Imported: 19,291
  • Number of lines: 19,504
  • Size: 10.08 MB
  • Passwords: Unknown
In 2013, the website puptaguig.net, associated with Polytechnic University of the Philippines Taguig Branch, allegedly suffered a data breach. Polytechnic University of the Philippines Taguig Branch is a local campus of the Polytechnic University system, based in the Philippines, offering educational programs and services. Reports suggest that the alleged breach may have affected approximately 4,000 records. The compromised data included email addresses, passwords, names, phone numbers, geographic locations, usernames, genders, site activity, and birthdates. The types of passwords potentially compromised in the breach include MD5 and SHA-1.
  • Date: 2013
  • Domain: puptaguig.net
  • Country: Philippines
  • Category: Education
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations Usernames Genders Site Activity Birthdates
  • Imported:
  • Records Imported: 4,048
  • Number of lines: 4,118
  • Size: 2.07 MB
  • Passwords: MD5, SHA-1
  • Cracked: 0%
In 2013, Pubup.ru, a Russian-based public forum, allegedly suffered a data breach. Pubup.ru provides a platform for discussions on a variety of topics. Reports suggest that approximately 3 records were compromised in the incident. The exposed data allegedly included email addresses, passwords, names, geographic locations, usernames, and site activity. The passwords were reportedly hashed using PHPass.
  • Date: 2013
  • Domain: pubup.ru
  • Country: Russia
  • Category: Forums & Communities
  • Data: Email Addresses Passwords Names Geographic Locations Usernames Site Activity
  • Imported:
  • Records Imported: 3
  • Number of lines: 25
  • Size: 1.3 KB
  • Passwords: PHPass
  • Cracked: 0%
Prostorm.eu allegedly suffered a data breach, affecting approximately 829 records. The compromised data includes usernames, IP addresses, site activity, and passwords in plaintext.
  • Data: Passwords Usernames IP Addresses Site Activity
  • Imported:
  • Records Imported: 829
  • Number of lines: 830
  • Size: 73.3 KB
  • Passwords: Plaintext

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.