Breach Intelligence

2,855

Total breached databases

In mid-2019, Vedantu, an Indian interactive online tutoring platform, allegedly suffered a data breach that exposed the personal information of 687,000 users. The leaked database, in JSON format, reportedly included email addresses, IP addresses, names, phone numbers, genders, and passwords stored as bcrypt hashes.
  • Data: Email Addresses Genders IP Addresses Languages Names Passwords Phone Numbers Site Activity Time Zones
  • Imported:
  • Records Imported: 4,906,774
  • Number of lines: 4,906,774
  • Size: 7.35 GB
  • Passwords: BCrypt
  • Cracked: 2%
In December 2012, the multiplayer online battle arena game known as Heroes of Newerth was hacked and over 8 million accounts extracted from the system. The compromised data included usernames, email addresses and passwords.
  • Data: Email Addresses Passwords Usernames
  • Imported:
  • Records Imported: 8,764,909
  • Number of lines: 8,764,960
  • Size: 314.05 MB
  • Passwords: vBulletin
  • Cracked: 66%
In late 2022, data allegedly taken from the Gemini crypto exchange was posted to a public hacking forum. The data consisted of email addresses and partial phone numbers, which Gemini later attributed to an incident at a third-party vendor (the vendor was not named).
  • Data: Email Addresses Phone Numbers
  • Imported:
  • Records Imported: 5,701,678
  • Number of lines: 5,701,677
  • Size: 254.02 MB
  • Passwords: No
In February 2018, the diet and exercise service MyFitnessPal suffered a data breach. The incident exposed 144 million unique email addresses alongside usernames, IP addresses and passwords stored as SHA-1 and bcrypt hashes (the former for earlier accounts, the latter for newer accounts). In 2019, the data appeared listed for sale on a dark web marketplace (along with several other large breaches) and subsequently began circulating more broadly.
  • Data: Email Addresses IP Addresses Passwords Usernames
  • Imported:
  • Records Imported: 150,633,046
  • Number of lines: 150,633,048
  • Size: 10.47 GB
  • Passwords: BCrypt, SHA-1 Salted
  • Cracked: 100%
In early 2020, the food delivery service Home Chef suffered a data breach which was subsequently sold online. The breach exposed the personal information of almost 9 million customers including names, IP addresses, post codes, the last 4 digits of credit card numbers and passwords stored as bcrypt hashes.
  • Data: Credit Card Information Email Addresses Geographic Locations IP Addresses Names Passwords Phone Numbers
  • Imported:
  • Records Imported: 8,717,764
  • Number of lines: 8,717,768
  • Size: 3.68 GB
  • Passwords: BCrypt
  • Cracked: 12%
In mid-2019, the video game cheats website "Aimware" suffered a data breach that exposed hundreds of thousands of subscribers' personal information. Data included email and IP addresses, usernames, forum posts, private messages, website activity and passwords stored as salted MD5 hashes.
  • Data: Email Addresses IP Addresses Messages Passwords Site Activity Usernames
  • Imported:
  • Records Imported: 247,019
  • Number of lines: 7,619,893
  • Size: 990.13 MB
  • Passwords: MyBB
  • Cracked: 52%
In approximately June 2022, a government messaging system for Turkey named "IYS (İleti Yönetim Sistemi)", had its database leaked due to an exposed ElasticSearch server. The leak exposed Names, Email addresses, Phone numbers, Usernames and Home Addresses.
  • Date: Jun 2022
  • Domain: iys.org.tr
  • Country: Turkey
  • Category: Government
  • Records Announced: 302,377
  • Source: breached.hn
  • Data: Email Addresses Names Phone Numbers Physical Locations Usernames
  • Imported:
  • Records Imported: 302,377
  • Number of lines: 302,377
  • Size: 170.12 MB
  • Passwords: No

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.