Breach Intelligence

2,850

Total breached databases

On 1 September 2024, the platform Tracelo, known for providing tracking and analytics services, suffered a data breach. It has been reported that the breach was executed by a user with the pseudonym 'Satanic'. Among the compromised data were names, email addresses, roles, addresses, geographic locations, passwords, subscription details, and various site activity logs.
  • Date: Sep 2024
  • Domain: tracelo.com
  • Threat Actor: Satanic
  • Category: Technology
  • Records Announced: 1,459,014
  • Source: hashmob.net
  • Data: Email Addresses Languages Names Passwords Payment Information Phone Numbers Physical Locations Site Activity Time Zones Usernames
  • Imported:
  • Records Imported: 1,459,304
  • Number of lines: 1,459,308
  • Size: 264.73 MB
  • Passwords: BCrypt
  • Cracked: 0%
mSpy 2024

mSpy 2024

Sensitive
In June 2024, mSpy, a spyware maker, allegedly suffered a major data breach after hacktivists obtained and published a large trove of its data online. The exposed dataset reportedly included 142GB of user data and support tickets, along with 176GB of more than half a million attachments. The breach contained 2.4 million unique email addresses, IP addresses, names, and photos. Much of the exposed content came from support tickets requesting assistance with installing the spyware on target devices, while the attachments included sensitive material such as screenshots of financial transactions, credit card photos, and nude selfies.
  • Data: Email Addresses IP Addresses Names Profile Photos
  • Imported:
  • Records Imported: 2,502,655
  • Number of lines: 2,502,655
  • Size: 4.33 GB
  • Passwords: No
In September 2018, the Mobile dating app for "Match[ing] with people of different ethnicities" Color Dating suffered a data breach that impacted 221k members. The breach led to the exposure of data including Email addresses, Full names, Locations, Bios and Passwords stored as Bcrypt ($2a$10) hashes.
  • Data: Bios Email Addresses Geographic Locations Names Passwords
  • Imported:
  • Records Imported: 221,367
  • Number of lines: 221,383
  • Size: 241.03 MB
  • Passwords: BCrypt
  • Cracked: 12%
In July 2022, pro-Ukrainian hackers reportedly breached Yappy, a Russian TikTok-style video-sharing platform developed by Gazprom-Media. The incident allegedly resulted in the exposure of personal data belonging to approximately 2.1 million users. Some of the leaked data includes usernames and phone numbers.
  • Date: 2022
  • Domain: yappy.media
  • Category: Social Media & Communication
  • Records Announced: 2,100,000
  • Data: Phone Numbers Usernames
  • Imported:
  • Records Imported: 2,539,305
  • Number of lines: 2,775,605
  • Size: 457.03 MB
  • Passwords: No
On May 7, 2024, a user named 'napoleon17' posed data from allegedly from BDE.es, the Bank of Spain, on a hacking forum. This leak revealed information on around 564k users, including government IDs, birth dates, full names, phone numbers and bank information, including IBAN numbers.
  • Date: 2024
  • Domain: clientebancario.bde.es
  • Threat Actor: napoleon17
  • Country: Spain
  • Category: Finance & Payments
  • Records Announced: 564,000
  • Data: Bank Account Information Birthdates Government IDs Names Phone Numbers
  • Imported:
  • Records Imported: 568,365
  • Number of lines: 568,366
  • Size: 52.11 MB
  • Passwords: No
In November 2015, the US internet and cable TV provider Comcast suffered a data breach that exposed 590k customer email addresses and plain text passwords. A further 27k accounts appeared with home addresses with the entire data set being sold on underground forums.
  • Data: Email Addresses Passwords Physical Locations
  • Imported:
  • Records Imported: 617,560
  • Number of lines: 617,560
  • Size: 19.67 MB
  • Passwords: Plaintext
In March 2015, HongFire, an anime and manga forum, allegedly suffered a data breach affecting its vBulletin platform. The incident reportedly exposed 1 million accounts. Among the compromised data were email addresses, IP addresses, usernames, dates of birth, and passwords stored as salted MD5 hashes.
  • Data: Birthdates Email Addresses IP Addresses Passwords Usernames
  • Imported:
  • Records Imported: 1,006,237
  • Number of lines: 1,006,237
  • Size: 117.28 MB
  • Passwords: vBulletin
  • Cracked: 50%

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.