Breach Intelligence

2,841

Total breached databases

In 2022, the website OverclockZone.com, known for its forums and community focused on computing and technology discussions, experienced a data breach. Approximately 675,000 lines of data were exposed. Some of the leaked data includes email addresses, usernames, IP addresses, birthdays, and passwords.
  • Data: Email Addresses Passwords Usernames IP Addresses Birthdates
  • Imported:
  • Passwords: Unknown
In May 2016, the Forum for StarWars fans known as LucasForums suffered a data breach that impacted 154k users. The leak led to the exposure of data including Usernames, Email addresses, IP Addresses and Passwords stored as vBulletin hashes.
  • Data: Email Addresses IP Addresses Passwords Usernames
  • Imported:
  • Passwords: vBulletin
  • Cracked: 0%
In 2022, Dobro.ru, a Russian online platform focused on charity and volunteerism, experienced a data breach that exposed 648,693 user records. The compromised data, shared in a CSV format with a file size of 131MB, included email addresses, hashed passwords, names, phone numbers, birthdates, and physical locations.
  • Date: 2022
  • Domain: dobro.ru
  • Country: Russia
  • Category: Non-Profit & Charities
  • Records Announced: 656,676
  • Data: Email Addresses Passwords Names Phone Numbers Physical Locations Site Activity Birthdates
  • Imported:
  • Passwords: Unknown
In November 2019, the website for Indian Rail left more than 2M records exposed on an unprotected Firebase database instance. The exposed data included 583k unique email addresses alongside usernames and passwords stored in plain text.
  • Data: Email Addresses Passwords Usernames
  • Imported:
  • Passwords: Plaintext
In 2011, Sony suffered breach after breach after breach — it was a very bad year for them. The breaches spanned various areas of the business ranging from the PlayStation network all the way through to the motion picture arm, Sony Pictures. A SQL Injection vulnerability in sonypictures.com lead to tens of thousands of accounts across multiple systems being exposed complete with plain text passwords.
  • Date: 2011
  • Domain: sonypictures.com
  • Category: Streaming & Entertainment
  • Records Announced: 51,207
  • Data: It is unclear which categories of data were compromised in the SonyPictures.com 2011 breach. This page will be revised as information becomes available.
  • Imported:
  • Number of lines: 51,269
  • Size: 2.83 MB
  • Passwords: Plaintext

Details about the Transfo.ir 2016 breach remain unavailable. Once it is imported, you will be able to check if your data was affected. Until then, you may search through other breaches to stay informed.

  • Data: At this stage, the exact nature of the compromised information in the Transfo.ir 2016 breach is unknown. Updates will be provided as they are verified.
  • Imported:
  • Number of lines: 371
  • Size: 62.34 KB
  • Passwords: ?
THCtalk 2017

THCtalk 2017

Sensitive
In approximately November 2017, the "Marijuana Discussion Forum" THCtalk suffered a data breach. The breach included Usernames, Email addresses, IP Addresses, Dates of Birth and Passwords stored as vBulletin hashes. In total, 82k users were affected.
  • Data: Birthdates Email Addresses IP Addresses Passwords Usernames
  • Imported:
  • Passwords: Hashed
  • Cracked: 0%

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.