Breach Intelligence

2,852

Total breached databases

Zee5.com 2021

Zee5.com 2021

In 2021, ZEE5, an Indian over-the-top streaming service operated by Zee Entertainment Enterprises, experienced a data breach. Reports indicate that the breach affected approximately 1 million users. Among the compromised data were email addresses, names, phone numbers, usernames, birthdates, and details of site activity.
  • Date: 2021
  • Domain: zee5.com
  • Country: India
  • Category: Streaming & Entertainment
  • Data: Email Addresses Names Phone Numbers Usernames Birthdates Site Activity
  • Records: 1,000,045
  • Lines: 1,000,046
  • Size: 89.29 MB
  • Passwords: No
Brazzers 2013

Brazzers 2013

Sensitive
In April 2013, the adult website known as Brazzers was hacked and 790k accounts were exposed publicly. Each record included a username, email address and password stored in plain text. The breach was brought to light by the Vigilante.pw data breach reporting site in September 2016.
  • Data: Email Addresses Passwords Usernames
  • Records: 928,072
  • Lines: 928,072
  • Size: 36.38 MB
  • Passwords: Plaintext
AlpineReplay 2019

AlpineReplay 2019

In August 2019, the sports tracking phone application available on Android and iOS AlpineReplay suffered a data breach that impacted 988k user records. The breach included Usernames, Full names, Email addresses, Genders, Dates of Birth, Sports information and Passwords stored as bcrypt hashes.
  • Data: Birthdates Email Addresses Genders Names Passwords Physical Descriptions Usernames
  • Records: 988,375
  • Lines: 988,376
  • Size: 208.66 MB
  • Passwords: BCrypt
  • Cracked: 27%
lockerim.co.il 2021

lockerim.co.il 2021

In 2021, Lockerim.co.il, an Israeli locker rental service for schools, reportedly experienced a data leak affecting approximately 500,000 users. The compromised data included names, email addresses, phone numbers, physical locations, genders, and passwords stored in plaintext.
  • Data: Email Addresses Genders Names Passwords Phone Numbers Physical Locations
  • Records: 501,345
  • Lines: 501,386
  • Size: 111.61 MB
  • Passwords: Plaintext
178 2011

178 2011

In December 2011, 178.com, a Chinese gaming website, suffered a data breach affecting approximately 9 million users. Reports indicate that the exposed data included usernames and passwords stored in plaintext, raising significant security concerns.
  • Date: Dec 2011
  • Domain: 178.com
  • Country: China
  • Category: Gaming
  • Data: Passwords Usernames
  • Records: 9,072,966
  • Lines: 9,072,966
  • Size: 254.44 MB
  • Passwords: Plaintext

Sonicbids 2018

In December 2019, the booking website Sonicbids suffered a data breach which they attributed to "a data privacy event involving our third-party cloud hosting services". The breach contained 752k user records including names and usernames, email addresses and passwords stored as PBKDF2 hashes.
  • Data: Email Addresses Names Passwords Usernames
  • Records: 748,421
  • Lines: 748,446
  • Size: 144.25 MB
  • Passwords: Django
  • Cracked: 45%
Bhinneka 2020

Bhinneka 2020

In early 2020, the Indonesian consumer electronics website Bhinneka suffered a data breach that exposed almost 1.3M customer records. The data included email and physical addresses, names, genders, dates of birth, phone numbers and salted password hashes.
  • Data: Birthdates Email Addresses Genders Names Passwords Phone Numbers Physical Locations
  • Records: 1,262,265
  • Lines: 1,262,567
  • Size: 591.46 MB
  • Passwords: Hashed Salted
  • Cracked: 0%

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.