Breach Intelligence

2,855

Total breached databases

In approximately July 2015, PS3Hax, a Sony PlayStation hacks and mods forum, allegedly suffered a data breach that exposed more than 447,000 accounts. The vBulletin-based platform reportedly exposed IP addresses and passwords stored as salted hashes, though the weak implementation allowed many of them to be quickly cracked.
  • Data: Email Addresses IP Addresses Passwords Usernames
  • Imported:
  • Records Imported: 457,060
  • Number of lines: 457,063
  • Size: 59.19 MB
  • Passwords: vBulletin
  • Cracked: 86%
In August 2020, the workout tracking app Jefit suffered a data breach. The data was subsequently sold within the hacking community and included over 9 million email and IP addresses, usernames and passwords stored as either vBulletin or argon2 hashes. Several million cracked passwords later appeared in broad circulation.
  • Data: Email Addresses IP Addresses Passwords Usernames
  • Imported:
  • Records Imported: 9,039,304
  • Number of lines: 9,044,382
  • Size: 4.38 GB
  • Passwords: vBulletin
  • Cracked: 63%
In May 2019, news broke of a massive SMS spam operation known as "ApexSMS" which was discovered after a MongoDB instance of the same name was found exposed without a password. The incident leaked over 80M records with 23M unique email addresses alongside names, phone numbers and carriers, geographic locations (state and country), genders and IP addresses.
  • Data: Email Addresses Genders Geographic Locations IP Addresses Names Phone Numbers Telecom Providers
  • Imported:
  • Records Imported: 88,690,073
  • Number of lines: 88,690,076
  • Size: 19.67 GB
  • Passwords: Unknown
In approximately 2010, DivX SubTitles, a now-defunct website that provided subtitle downloads for DivX video files, suffered a data breach exposing around 783,000 user accounts. Among the compromised data were email addresses, usernames, and passwords stored in plain text.
  • Data: Email Addresses Passwords Usernames
  • Imported:
  • Records Imported: 783,009
  • Number of lines: 783,010
  • Size: 39.2 MB
  • Passwords: Plaintext
In August 2022, the MMORPG website GGCorp suffered a data breach that exposed almost 2.4M unique email addresses. The data also included IP addresses, usernames and MD5 password hashes.
  • Data: Email Addresses IP Addresses Passwords Usernames
  • Imported:
  • Records Imported: 2,504,726
  • Number of lines: 2,504,772
  • Size: 455.97 MB
  • Passwords: vBulletin
  • Cracked: 72%
Clash of Clans Builder - Base Design Strategies, These Clash of Clans bases have been selected by members of the community by their base of choice. The base they use in-game! Build your base ONLINE website experienced a security breach in 2021, about 879k user were exposed in the incident.
  • Data: Email Addresses IP Addresses Passwords Site Activity Usernames
  • Imported:
  • Records Imported: 879,745
  • Number of lines: 879,747
  • Size: 89.37 MB
  • Passwords: MD5
  • Cracked: 99%
In July 2021, the "Best Sports Betting Website In India & Asia" Fun88 suffered a data breach that impacted 403k members. The breach led to the exposure of data including Full names, Phone numbers, Usernames and Email addresses.
  • Data: Email Addresses Names Phone Numbers Usernames
  • Imported:
  • Records Imported: 403,100
  • Number of lines: 403,100
  • Size: 527.64 MB
  • Passwords: No

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.