Breach Intelligence

2,852

Total breached databases

In approximately September 2015, the XBOX 360 forum known as XBOX360 ISO was hacked and 1.2 million accounts were exposed. Along with email and IP addresses, the vBulletin forum also exposed salted MD5 password hashes.
  • Data: Email Addresses IP Addresses Passwords Usernames
  • Records: 1,294,718
  • Lines: 1,294,729
  • Size: 132.91 MB
  • Passwords: MD5 Salted, vBulletin
  • Cracked: 64%
In October 2019, the Australian-based mathematics education service K7Maths suffered a data breach that impacted 1.0 million users. The breach led to the exposure of data including Full names, Email addresses, Education Facilities and Passwords stored as Bcrypt hashes.
  • Data: Education Email Addresses Names Passwords
  • Records: 1,078,624
  • Lines: 1,078,624
  • Size: 379.5 MB
  • Passwords: BCrypt
  • Cracked: 50%
In approximately February 2015, Xbox-Scene, an Xbox forum, allegedly suffered a data breach that exposed more than 432,000 accounts. The IP.Board-based platform reportedly leaked IP addresses and passwords stored as salted hashes, though the weak implementation allowed many of them to be quickly cracked.
  • Data: Email Addresses IP Addresses Passwords Usernames
  • Records: 455,103
  • Lines: 455,554
  • Size: 36.93 MB
  • Passwords: MyBB
  • Cracked: 97%
In approximately June 2017, the dating website Newmeet/Abcoeur suffered a data breach that impacted 5.4 million customers. The breach included Genders, Dates of Birth, Email addresses, Geopgraphical locations, IP addresses, Social links and Passwords stored as Plaintext hashes.
  • Data: Birthdates Email Addresses Genders Geographic Locations IP Addresses Passwords Social Profiles
  • Records: 6,340,903
  • Lines: 6,744,041
  • Size: 1.14 GB
  • Passwords: Plaintext
In February 2023, data belonging to the Asian and Hispanic food delivery service Weee appeared on a popular hacking forum. Dating back to mid-2022, the data included 1.1M unique email addresses from 11M rows of orders containing names, phone numbers and delivery instructions.
  • Data: Email Addresses Names Order Information Phone Numbers
  • Records: 11,328,000
  • Lines: 11,337,847
  • Size: 5.1 GB
  • Passwords: No
Sometime around 2017, a compilation of data from multiple Malaysian sources was leaked. This massive data collection includes records from the telecommunications industry, financial institutions, government benefits, and more, aimed at Malaysian citizens and residents. Reports suggest the breach involved approximately 158 million lines of data, with about 54 million unique phone numbers. Among the compromised data were names, phone numbers, physical locations, and government ID numbers.
  • Date: 2017
  • Country: Malaysia
  • Category: Compilations & Combo lists
  • Data: Names Phone Numbers Physical Locations Government IDs
  • Records: 158,036,649
  • Lines: 158,036,650
  • Size: 29.2 GB
  • Passwords: No
In December 2016, the Russian hacking forum Best-Hack suffered a data breach that impacted 70k users. The breach included Usernames, Email addresses and Passwords stored as vBulletin hashes.
  • Data: Email Addresses Passwords Usernames
  • Records: 70,259
  • Lines: 70,259
  • Size: 6.27 MB
  • Passwords: vBulletin
  • Cracked: 46%

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.