Breach Intelligence

3,355

Total breached databases

In December 2022, the Indian event-management and cashless-payment platform EventBot (eventbot.in) allegedly suffered a data breach. EventBot provides RFID card, QR code, and UPI-based cashless payment systems for events, festivals, and stalls. Reports suggest a database was subsequently leaked online, exposing approximately 472 thousand records. The exposed data allegedly included email addresses, names, phone numbers, usernames, and passwords stored as SHA-1 hashes alongside some plaintext values.
  • Date: Dec 2022
  • Domain: eventbot.in
  • Country: India
  • Category: Streaming & Entertainment
  • Data: Email Addresses Passwords Names Phone Numbers Usernames
  • Records: 472,522
  • Lines: 1,752,589
  • Size: 429.7 MB
  • Passwords: SHA-1, Plaintext
Sometime before 2023, everydayon.com, a multi-tenant school and hospital management software platform used by institutions in India, allegedly suffered a data breach. It has been reported that a database dump exposing records of students, patients, faculty and staff was made available. Reports suggest approximately 23,000 individuals were affected, with exposed data including names, email addresses, phone numbers, genders, dates of birth, physical addresses, usernames, and passwords stored as plaintext and bcrypt hashes.
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations Usernames Genders Birthdates Education
  • Records: 24,712
  • Lines: 781,694
  • Size: 108.19 MB
  • Passwords: Plaintext, BCrypt
Sometime before November 2020, the Slovak online electronics and computer retailer Euroshop (euroshop.sk) allegedly suffered a data breach. It has been reported that the exposed data surfaced as part of the Cit0day breach collection. Reports suggest approximately 36,000 individuals were affected, with exposed records including email addresses, usernames, plaintext passwords, names, phone numbers, physical and billing addresses, company details, tax identifiers, and IP addresses.
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations Usernames IP Addresses Tax IDs Company Information
  • Records: 39,329
  • Lines: 4,220,137
  • Size: 1.24 GB
  • Passwords: Plaintext
In early 2023, the event and activity management portal of Universitas Internasional Batam (event.uib.ac.id), a private university in Batam, Indonesia, allegedly suffered a data breach. It has been reported that the exposed database contained records relating to approximately 1,200 individuals — students, staff, event participants and committee members. The compromised data reportedly included email addresses, full names and institutional affiliations. The breach did not appear to expose passwords.
  • Date: Jan 2023
  • Domain: event.uib.ac
  • Country: Indonesia
  • Category: Education
  • Data: Email Addresses Names Company Information
  • Records: 17,309
  • Lines: 31,046
  • Size: 527.77 MB
  • Passwords: ?
Sometime before 2023, the exam portal of Ghana's National Teaching Council (exams.ntc.gov.gh), used to administer the Ghana Teacher Licensure Examination, allegedly suffered a data breach. Reports suggest the exposed database contained records for approximately 39,000 individuals, including email addresses, full names, phone numbers, genders, dates of birth, home towns and contact addresses, and religious affiliations, along with a small set of administrator account usernames and MD5-hashed passwords.
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations Usernames Genders Religions Birthdates
  • Records: 98,725
  • Lines: 523,072
  • Size: 106.91 MB
  • Passwords: MD5
  • Cracked: 0%
In March 2023, Eva Professional Hair Care (evaprofessional.com) allegedly suffered a data breach. Eva Professional Hair Care is a Spanish e-commerce store selling professional hair-care products. It has been reported that data from its online store was exposed, affecting approximately 9,400 individuals. The compromised information reportedly included email addresses, names, passwords (stored as MD5 and bcrypt hashes), genders, birthdates, phone numbers, physical addresses, government identification numbers, and IP addresses.
  • Data: Email Addresses Passwords Names Phone Numbers Physical Locations Government IDs Genders IP Addresses Birthdates
  • Records: 11,122
  • Lines: 460,088
  • Size: 55.21 MB
  • Passwords: BCrypt, MD5
  • Cracked: 0%
Sometime before 2022, the events-calendar application AltCal (events.alt-cal.com) allegedly suffered a data breach. AltCal is a mobile and web app that lets users track, create, and share local events. Reports suggest approximately 400 individuals were affected, with the exposed data including email addresses, MD5-hashed passwords, names, usernames, phone numbers, geographic locations, and websites.
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations Usernames Websites
  • Records: 888
  • Lines: 2,719
  • Size: 350.55 KB
  • Passwords: MD5
  • Cracked: 0%

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.