Breach Intelligence

2,843

Total breached databases

Rosebutt Board 2016

Sensitive
Some time prior to May 2016, the forum known as "Rosebutt Board" was hacked and 107k accounts were exposed. The self-described "top one board for anal fisting, prolapse, huge insertions and rosebutt fans" had email and IP addresses, usernames and weakly stored salted MD5 password hashes hacked from the IP.Board based forum.
  • Data: Email Addresses IP Addresses Passwords Usernames
  • Imported:
  • Passwords: MD5 Salted
  • Cracked: 0%
BitView 2024

BitView 2024

In December 2024, BitView, a video sharing community, allegedly suffered a data breach attributed to a backup taken by a former administrator earlier that year. The incident reportedly exposed 63,000 customer records. Among the compromised data were email addresses, IP addresses, bcrypt password hashes, usernames, bios, private messages, and video comments. In some cases, gender, dates of birth, and geographic locations were also included.
  • Data: Bios Comments Dates of birth Email addresses Genders Geographic locations IP addresses Passwords Private messages Usernames
  • Imported:
  • Passwords: BCrypt
  • Cracked: 0%
New Jersey Voter 2017

New Jersey Voter 2017

This database of New Jersey's voters was leaked in 2017 it has 5.5 million residents feel free to download below. No passwords.
  • Date: 2017
  • Domain: nj.gov
  • Category: Government
  • Records Announced: 5,578,303
  • Data: Birthdates Genders Government IDs Names Personal Information Phone Numbers Physical Locations
  • Imported:
  • Passwords: No
FlipaClip 2024

FlipaClip 2024

In November 2024, the animation app FlipaClip suffered a data breach that exposed almost 900k records due to an exposed Firebase server. The impacted data included name, email address, country and date of birth. FlipaClip advised the issue has since been rectified.
  • Data: Birthdates Email Addresses Geographic Locations Names
  • Imported:
  • Passwords: No
French Citizens 2024

French Citizens 2024

In September 2024, over 90M rows of data on French Citizens was found left exposed in a publicly facing database. Compiled from various data breaches, the corpus contained 28M unique email addresses with the various source breaches each exposing different fields including name, physical and IP address, phone number and partial credit card data including payment type and last 4 digits.
  • Date: Sep 25, 2024
  • Country: France
  • Category: Compilations & Combo lists
  • Records Announced: 28,445,106
  • Source: haveibeenpwned.com
  • Data: Device information Email addresses IP addresses Names Partial credit card data Phone numbers Physical addresses
  • Imported:
  • Passwords: No
Appartoo 2017

Appartoo 2017

In March 2017, Appartoo, a French flatsharing website, allegedly suffered a data breach that exposed personal information of nearly 50,000 members. Among the compromised data were email addresses, genders, ages, private messages exchanged between users, and passwords stored as SHA-256 hashes.
  • Data: Ages Email Addresses Genders IP Addresses Job Information Marital Statuses Messages Names Passwords Physical Locations Security Credentials Social Profiles
  • Imported:
  • Passwords: SHA-256
  • Cracked: 0%

SaverSpy 2018

In September 2018, a massive collection of personal details was discovered exposed in an unprotected MongoDB instance. The database, labeled "Yahoo_090618_SaverSpy," appeared to have been used for marketing campaigns, possibly for spam purposes, though its origins were unclear. The exposure reportedly affected 2.5 million records. Among the compromised data were names, email addresses, genders, and physical locations.
  • Date: Sep 18, 2018
  • Category: Professional & Corporate
  • Records Announced: 2,457,420
  • Source: haveibeenpwned.com
  • Data: Email Addresses Genders Names Physical Locations
  • Imported:
  • Passwords: No

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.