Breach Intelligence

2,850

Total breached databases

In September 2019, the Forums for the Cybersecurity Company Comodo suffered a data breach that impacted 173k members. The breach included Email addresses, Usernames, IP Addresses and Passwords stored as MD5 hashes. Comodo released a statement about the incident here.
  • Data: Email Addresses Geographic Locations IP Addresses Passwords Social Profiles Usernames
  • Imported:
  • Records Imported: 186,631
  • Number of lines: 186,833
  • Size: 66.24 MB
  • Passwords: vBulletin, SHA-1 Salted
  • Cracked: 0%
In 2020, a Russian job-seeking website was breached, resulting in the exposure of approximately 337,000 user accounts. The compromised data reportedly included full names, email addresses, phone numbers, ICQ numbers, cities, ages, genders, and marital statuses. Additional leaked information may have included education details, work history, salary expectations, skills, and job preferences.
  • Date: 2020
  • Country: Russia
  • Category: Professional & Corporate
  • Records Announced: 337,951
  • Data: Ages Company Information Education Email Addresses Genders Geographic Locations Job Information Marital Statuses Names Phone Numbers
  • Imported:
  • Records Imported: 337,929
  • Number of lines: 337,950
  • Size: 261.44 MB
  • Passwords: No
In October 2015, the PHP discussion board PHP Freaks was hacked and 173k user accounts were publicly leaked. Among the compromised data were usernames, email addresses, IP addresses, and passwords.
  • Data: Email Addresses IP Addresses Passwords Usernames
  • Imported:
  • Records Imported: 171,522
  • Number of lines: 171,624
  • Size: 9.86 MB
  • Passwords: MD5, vBulletin
  • Cracked: 0%
In 2019, a significant data breach involving Brazil's DATASUS and DETRAN databases exposed over 184 million records. DATASUS manages health-related data under Brazil’s Ministry of Health, while DETRAN oversees vehicle registration and driver licensing. The breach reportedly compromised extensive personal and vehicle-related information. Among the leaked data were names, telephone numbers, geographic locations, government identification numbers, and vehicle license plate details.
  • Data: Family Members Geographic Locations Government IDs Insurance Information License Plate Numbers Names Phone Numbers Physical Locations Places of Birth Tax IDs Vehicle Information
  • Imported:
  • Records Imported: 288,570,524
  • Number of lines: 288,570,526
  • Size: 56.36 GB
  • Passwords: No
In August 2019, Audi USA suffered a data breach after a vendor left data unsecured and exposed on the internet. The data contained 2.7M unique email addresses along with names, phone numbers, physical addresses and vehicle information including VIN. In a disclosure statement from Audi, they also advised some customers had driver's licenses, dates of birth, social security numbers and other personal information exposed.
  • Data: Birthdates Driving License Numbers Email Addresses Names Phone Numbers Physical Locations Social Security Numbers Vehicle Information
  • Imported:
  • Records Imported: 5,654,507
  • Number of lines: 5,654,509
  • Size: 1.21 GB
  • Passwords: No
In June 2020, the online antiques marketplace LiveAuctioneers suffered a data breach which was subsequently sold online then extensively redistributed in the hacking community. The data contained 3.4 million records including names, email and IP addresses, physical addresses, phones numbers and passwords stored as unsalted MD5 hashes.
  • Data: Email Addresses IP Addresses Names Passwords Phone Numbers Physical Locations Usernames
  • Imported:
  • Records Imported: 3,389,577
  • Number of lines: 3,389,562
  • Size: 1.99 GB
  • Passwords: MD5
  • Cracked: 97%
In approximately June 2019, the website for buying & renting Condos Condo.com suffered a data breach that impacted 1.5 million users. The breach led to the exposure of data including Full names, Email addresses, Phone numbers and Locations.
  • Data: Company Information Email Addresses Names Phone Numbers Physical Locations
  • Imported:
  • Records Imported: 1,573,685
  • Number of lines: 1,573,972
  • Size: 130.65 MB
  • Passwords: No

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.