Breach Intelligence

2,383

Total breached databases

Search breaches

Luxottica 2021

Luxottica 2021

In March 2021, the world's largest eyewear company Luxoticca suffered a data breach via one of their partners that exposed the personal information of more than 70M people. The data was subsequently sold via a popular hacking forum in late 2022 and included email and physical addresses, names, genders, dates of birth and phone numbers. In a statement from Luxottica, they advised they were aware of the incident and are currently "considering other notification obligations".
  • Date: Mar 16, 2021
  • Domain: luxottica.com
  • Category: E-commerce
  • Records Announced: 77,093,812
  • Numer of lines: 305,759,991
  • Records Imported: 300,218,611
  • Size: 15.82 GB
  • Data: Dates of birth, Email addresses, Genders, Names, Phone numbers, Physical addresses
  • Passwords: No
  • Imported:
  • Links:
?

Whois Domain Lookup 2021

No info.
  • Date: 2021
  • Category: Whois
  • Numer of lines: 289,954,607
  • Records Imported: 289,954,607
  • Size: 17.11 GB
  • Data: Domains, Full Names, Email Addresses
  • Passwords: No
  • Imported:
NetEase(163.com & 126.com) 2015

NetEase(163.com & 126.com) 2015

In October 2015, the Chinese site known as NetEase (located at 163.com) was reported as having suffered a data breach that impacted hundreds of millions of subscribers. Whilst there is evidence that the data itself is legitimate (multiple HIBP subscribers confirmed a password they use is in the data), due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified". The data in the breach contains email addresses and plain text passwords. Read more about Chinese data breaches in Have I Been Pwned.
Truecaller India 2019

Truecaller India 2019

In February 2019, the "world’s Best Caller ID and Spam Blocking app" Truecaller suffered a data breach that impacted 286 million Indian users. The breach led to the exposure of data including Phone Numbers, Phone Carriers, Full names, Genders, Locations, Job Titles, Company Names, Email Addresses, Websites, Facebook IDs and Twitter Usernames. Due to Truecallers claim of this data being fake//fabricated, this Thread is free so you can decide for yourself.
  • Date: Feb 2019
  • Domain: truecaller.com
  • Country: India
  • Category: Mobile App
  • Records Announced: 286,413,813
  • Numer of lines: 286,412,160
  • Records Imported: 286,408,911
  • Size: 33.33 GB
  • Data: Phone Numbers, Phone Carriers, Full names, Genders, Locations, Job Titles, Company Names, Email Addresses, Websites, Facebook IDs, Twitter Usernames
  • Passwords: No
  • Imported:
  • Links:
?

Collection #3 2019

The Collection #3 data breach is part of a larger series of data dumps, including Collections #1 through #5, which compiled email addresses and passwords from thousands of sources, from previously known data breaches and some new alleged breaches. Collection #1 alone contained about 2.7 billion records, including 1.2 billion unique email and password combinations, 773 million unique email addresses, and 21 million unique plaintext passwords. Additional collections, named Collections #2 through #5, along with "AP MYR&ZABUGOR #2" and "ANTIPUBLIC #1," were also discovered, significantly adding to the scope of compromised data​.