Breach Intelligence

2,843

Total breached databases

In 2015, G Fuel, an energy drink brand, experienced a data breach reportedly caused by social engineering of Shopify support, which allowed unauthorized access to the Shopify admin panel. Approximately 161,412 user records were exposed. Some of the leaked data includes names, email addresses, phone numbers, geographic locations, and order details such as total spent and total orders.
  • Date: 2015
  • Domain: gfuel.com
  • Category: E-commerce & Retail
  • Records Announced: 161,412
  • Data: Company Information Email Addresses Names Phone Numbers Physical Locations
  • Imported:
  • Records Imported: 161,432
  • Number of lines: 161,472
  • Size: 20 MB
  • Passwords: No
In August 2020, Indian payment provider Paytm was reported to have suffered a data breach followed by a ransom demand, after which the data was circulated publicly. However, investigations later determined that the exposed dataset was unrelated to Paytm. The dataset reportedly included 3.4 million unique email addresses. Some of the leaked data includes names, phone numbers, genders, dates of birth, PAN IDs, income levels, and details of previous purchases.
  • Data: Birthdates Email Addresses Financial Information Genders Geographic Locations Names Order Information Phone Numbers Tax IDs
  • Imported:
  • Records Imported: 5,084,731
  • Number of lines: 1,868,437
  • Size: 356.78 MB
  • Passwords: No
In 2021, PhonePe, a digital payments and financial technology company based in Bengaluru, India, was reportedly involved in a data breach. The source and credibility of this claim remain unverified, and it is unclear whether the incident definitively occurred. According to unconfirmed reports, approximately 2 million user records may have been exposed. Some of the leaked data includes customer names, email addresses, phone numbers, geographic locations, and bank-related information.
  • Date: 2021
  • Domain: phonepe.com
  • Country: India
  • Category: Finance & Payments
  • Records Announced: 2,084,423
  • Data: Bank Account Information Email Addresses Geographic Locations Names Phone Numbers
  • Imported:
  • Records Imported: 2,084,420
  • Number of lines: 746,937
  • Size: 158.95 MB
  • Passwords: No

WayDate 2016

Sensitive
In 2016, the dating website WayDate.com, known for facilitating online matchmaking, experienced a data leak that exposed approximately 120,000 user records. The compromised information reportedly included IDs, nicknames, passwords, real names, birthdates, and contact details. Among the leaked data were also details from user profiles, such as marital status, relationship preferences, and other personal information.
  • Data: Ages Email Addresses Ethnicities Government IDs IP Addresses Languages Marital Statuses Names Passwords Phone Numbers Physical Locations Profile Photos Religions Sexual Orientations Usernames
  • Imported:
  • Records Imported: 120,949
  • Number of lines: 178,929
  • Size: 79.46 MB
  • Passwords: Plaintext
In May 2024, The Post Millennial, a conservative news website, allegedly suffered a data breach that also resulted in the defacement of its site. The incident reportedly exposed three separate datasets: information on hundreds of writers and editors, including IP addresses, physical addresses, and email addresses; details of tens of thousands of subscribers, including names, emails, usernames, phone numbers, and plain text passwords; and tens of millions of email addresses from thousands of mailing lists alleged to have been used by The Post Millennial. The mailing lists, which have not been independently verified, appeared to originate from various campaigns and contained additional personal attributes such as names, phone numbers, and physical addresses.
  • Data: Email Addresses Genders IP Addresses Names Passwords Phone Numbers Physical Locations Usernames
  • Imported:
  • Records Imported: 263,634,570
  • Number of lines: 308,204,285
  • Size: 16.16 GB
  • Passwords: Plaintext
In 2017, the esports platform FACEIT, known for hosting competitive online gaming tournaments, suffered a data breach affecting approximately 230,000 members. The method of the breach and the identity of the perpetrators remain unknown. Among the compromised data were email addresses and passwords stored in plaintext.
  • Date: 2017
  • Domain: faceit.com
  • Category: Gaming
  • Records Announced: 230,709
  • Data: Email Addresses Passwords
  • Imported:
  • Records Imported: 230,708
  • Number of lines: 230,709
  • Size: 7 MB
  • Passwords: Plaintext
In approximately 2017, the gaming website AhoyGame suffered a data breach that impacted 191k users. The breach included Email Addresses and Passwords stored as Vbulletin hashes.
  • Data: Email Addresses Passwords
  • Imported:
  • Records Imported: 191,120
  • Number of lines: 191,165
  • Size: 11.6 MB
  • Passwords: Hashed
  • Cracked: