Breach Intelligence

2,840

Total breached databases

In November 2018, security researcher Bob Diachenko reportedly discovered an unprotected database hosted by Adapt, a data aggregation service marketing itself as a provider of “Fresh Quality Contacts.” The exposed dataset contained more than 9.3 million unique records of individuals and their employers. Among the compromised information were names, job titles, contact details, and employer-related data, including organisation descriptions, sizes, and revenue figures.
  • Data: Company Information Email Addresses Job Information Names Phone Numbers Physical Locations Social Profiles
  • Imported:
  • Records Imported: 9,269,888
  • Number of lines: 11,402,643
  • Size: 1.71 GB
  • Passwords: No
In December 2018, the Indian job portal IIMJobs suffered a data breach that exposed 4.1 million unique email addresses. The data also included names, phone numbers, geographic locations, dates of birth, job titles, job applications and cover letters plus passwords stored as unsalted MD5 hashes.
  • Data: Birthdates Email Addresses Geographic Locations IP Addresses Job Information Names Passwords Phone Numbers
  • Imported:
  • Records Imported: 15,694,367
  • Number of lines: 413,748,446
  • Size: 43.18 GB
  • Passwords: MD5
  • Cracked: 0%
In mid-2018, social commerce marketplace Poshmark suffered a data breach that exposed 36M user accounts. The compromised data included email addresses, names, usernames, genders, locations and passwords stored as bcrypt hashes.
  • Data: Email Addresses Genders Geographic Locations Names Passwords Usernames
  • Imported:
  • Records Imported: 50,045,864
  • Number of lines: 50,045,882
  • Size: 24.52 GB
  • Passwords: BCrypt
  • Cracked: 50%
In December 2013, the torrent site Torrent Invites was hacked and over 352k accounts were exposed. The vBulletin forum contained usernames, email and IP addresses, birth dates and salted MD5 hashes of passwords.
  • Data: Birthdates Email Addresses IP Addresses Passwords Site Activity Usernames
  • Imported:
  • Records Imported: 355,049
  • Number of lines: 27,905,822
  • Size: 6.21 GB
  • Passwords: vBulletin
  • Cracked: 30%
In January 2022, the logistics platform Wahana Express, known for providing logistics services, transportation, warehousing, and e-commerce support throughout Indonesia, experienced a data breach. Approximately 20 million records were exposed, with around 9 million unique phone numbers belonging to recipients and senders. Among the compromised data were physical locations, names, phone numbers, transportation details, and order information.
  • Date: Jan 2022
  • Domain: wahana.com
  • Threat Actor: Addka72424
  • Country: Indonesia
  • Category: Logistics & Transportation
  • Records Announced: 19,576,688
  • Data: Geographic Locations Names Order Information Phone Numbers Site Activity
  • Imported:
  • Records Imported: 39,513,375
  • Number of lines: 39,513,375
  • Size: 64.29 GB
  • Passwords: No
In 2021, the Spanish online pharmacy Promofarma allegedly suffered a data breach. The platform, known for selling health and wellness products, reportedly had data from over 4.9 million users exposed. Among the compromised information were names and email addresses. There is no evidence linking this incident to a previous breach that occurred in 2019.
  • Data: Email Addresses IP Addresses Site Activity
  • Imported:
  • Records Imported: 7,669,779
  • Number of lines: 7,669,792
  • Size: 496.52 MB
  • Passwords: No
In December 2016, an attacker breached PayAsUGym's website exposing over 400k customers' personal data. The data was consequently leaked publicly and broadly distributed via Twitter. The leaked data contained personal information including email addresses and passwords hashed using MD5 without a salt.
  • Data: Credit Card Information Email Addresses IP Addresses Names Passwords Payment Information Phone Numbers Physical Locations Site Activity
  • Imported:
  • Records Imported: 437,644
  • Number of lines: 437,695
  • Size: 52.48 MB
  • Passwords: MD5
  • Cracked: 99%