Breach Intelligence

2,850

Total breached databases

At present, no extended description exists for the Nukjevet.net 2020 incident. This entry is included so you are aware of its existence. Verification against this breach will be possible in the future. Meanwhile, you can check other breaches for your information.

  • Data: It is unclear which categories of data were compromised in the Nukjevet.net 2020 breach. This page will be revised as information becomes available.
  • Imported:
  • Number of lines: 8,176,245
  • Size: 1.51 GB
  • Passwords: ?
In September 2016, the new eThekwini eServices website in South Africa was launched with a number of security holes that lead to the leak of over 98k residents' personal information and utility bills across 82k unique email addresses. Emails were sent prior to launch containing passwords in plain text and the site allowed anyone to download utility bills without sufficient authentication. Various methods of customer data enumeration was possible and phishing attacks began appearing the day after launch.
  • Data: Birthdates Death Information Email Addresses Financial Information Genders Government IDs Names Passports Passwords Phone Numbers Physical Locations
  • Imported:
  • Passwords: Plaintext
In May 2020, the Gaming forum Apolyton Civilization Site suffered a data breach that impacted 123k users. The breach led to the exposure of data including Email addresses, Usernames and Passwords stored as VBulletin/BcryptMD5 hashes.
  • Data: Email Addresses Passwords Usernames
  • Imported:
  • Number of lines: 123,092
  • Size: 9.41 MB
  • Passwords: BCrypt, MD5
  • Cracked: 0%
DiskUnion, a Japanese record chain retailer and music distributor, experienced a data breach that affected 702k consumers around June 2022. Email addresses, full names, residential addresses, phone numbers, and plaintext passwords were all exposed in the incident.
  • Data: The exact data fields compromised in the diskunion.net 2022 breach are still under review. Updates will be published when confirmed.
  • Imported:
  • Passwords: ?

At this time, no official description is available for the Orderly.mx 2021 incident. This record remains published to ensure transparency. Once imported, you will be able to check if your data was involved. For now, you can review other breaches to see if your information appears there.

  • Data: At present, the information about what data was leaked in the Orderly.mx 2021 breach remains unavailable. Further updates will follow.
  • Imported:
  • Number of lines: 3,471,627
  • Size: 1.01 GB
  • Passwords: ?

At present, no extended description exists for the Hackua.com 2009 incident. This entry is included so you are aware of its existence. Verification against this breach will be possible in the future. Meanwhile, you can check other breaches for your information.

  • Data: It is unclear which categories of data were compromised in the Hackua.com 2009 breach. This page will be revised as information becomes available.
  • Imported:
  • Number of lines: 38,826
  • Size: 13 MB
  • Passwords: ?
In December 2016, the forum for the public blockchain-based distributed computing platform Ethereum reportedly suffered a data breach. The incident exposed over 16,000 unique email addresses, along with IP addresses, private forum messages, and passwords, most of which were hashed with bcrypt.
  • Data: Email Addresses IP Addresses Messages Passwords Site Activity Usernames
  • Imported:
  • Passwords: BCrypt
  • Cracked: 0%

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.