Breach Intelligence

2,850

Total breached databases

In 2020, Poolpowershop.de, an online retailer based in Germany specializing in selling pool, spa, and wellness products, allegedly suffered a data breach. The incident reportedly exposed approximately 58,000 records which included email addresses, hashed and salted passwords, usernames, government IDs, IP addresses, birthdates, as well as details regarding users’ geographic locations, site activity, social profiles, and other websites they visited.
  • Data: Email Addresses Passwords Geographic Locations Usernames Government IDs IP Addresses Site Activity Social Profiles Websites Birthdates
  • Imported:
  • Records Imported: 58,168
  • Number of lines: 58,268
  • Size: 29.14 MB
  • Passwords: Hashed Salted, vBulletin
  • Cracked: 0%
In 2016, Pokemonus.ru allegedly suffered a data breach. The breach reportedly compromised around 1,000 records. The data exposed included email addresses, usernames, passwords (notably vBulletin hashes), geographic locations, IP addresses, site activity, social profiles, websites, and birthdates.
  • Data: Email Addresses Passwords Geographic Locations Usernames IP Addresses Site Activity Social Profiles Websites Birthdates
  • Imported:
  • Records Imported: 1,003
  • Number of lines: 1,100
  • Size: 598.7 KB
  • Passwords: vBulletin
  • Cracked: 0%
In 2021, Player Top allegedly suffered a data breach. Player Top is an e-commerce platform based in France that specializes in car multimedia systems and accessories. The breach reportedly compromised data for approximately 13,000 records. Key compromised information includes email addresses, passwords hashed using MD5, names, geographic locations, genders, IP addresses, site activity, company information, and birthdates.
  • Date: 2021
  • Domain: player-top.fr
  • Country: France
  • Category: E-commerce & Retail
  • Data: Email Addresses Passwords Names Geographic Locations Genders IP Addresses Site Activity Company Information Birthdates
  • Imported:
  • Records Imported: 13,302
  • Number of lines: 13,365
  • Size: 4.11 MB
  • Passwords: MD5
  • Cracked: 0%
In 2014, Pitchpartner.com allegedly suffered a data breach which reportedly affected approximately 30 records. The compromised data included email addresses, names, phone numbers, geographic locations, usernames, site activity, social profiles, job information, company information, and passwords, although the specifics of the password security breach remain unclear.
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations Usernames Site Activity Social Profiles Job Information Company Information
  • Imported:
  • Records Imported: 30
  • Number of lines: 101
  • Size: 202.09 KB
  • Passwords: Unknown
In 2021, Physiodesk.com allegedly suffered a data breach. Physiodesk.com seems to be related to healthcare services or products, potentially offering resources or tools beneficial for physical health management. The alleged breach reportedly compromised approximately 6,100 records, including sensitive data such as email addresses, passwords (hashed using MD5), names, phone numbers, geographic locations, IP addresses, and site activity.
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations IP Addresses Site Activity
  • Imported:
  • Records Imported: 6,096
  • Number of lines: 6,134
  • Size: 4.82 MB
  • Passwords: MD5
  • Cracked: 0%
In 2021, Pearldrummersforums.com allegedly suffered a data breach. Pearl Drummers Forum is an online community centered around users who are enthusiasts of Pearl drums and percussion instruments. It serves as a platform for discussion, advice sharing, and community engagement among drummers. This incident reportedly exposed around 198,000 records. The data compromised includes email addresses, usernames, IP addresses, site activity, social profiles, websites, birthdates, and vBulletin hashed passwords.
  • Data: Email Addresses Passwords Usernames IP Addresses Site Activity Social Profiles Websites Birthdates
  • Imported:
  • Records Imported: 197,821
  • Number of lines: 197,913
  • Size: 85.95 MB
  • Passwords: vBulletin
  • Cracked: 0%
In September 2016, PasswordsCity.com, a website known for sharing and trading stolen password databases and other leaked data, allegedly experienced a data breach. It has been reported that approximately 40,000 records were compromised. The data exposed included email addresses, usernames, IP addresses, site activity, birthdates, and passwords hashed with vBulletin.
  • Data: Email Addresses Passwords Usernames IP Addresses Site Activity Birthdates
  • Imported:
  • Records Imported: 39,737
  • Number of lines: 39,902
  • Size: 21.31 MB
  • Passwords: vBulletin
  • Cracked: 0%

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.