Full List

Search

Recent Breaches

• Eir Telecom December 5, 2016 • [ hack, malware, technology ] Eir warns customers that 2000 of its modems have been compromised by the Mirai botnet.
• DailyMotion December 5, 2016 • [ leak, technology ] An unknown hacker extracts 85.2 million unique email addresses and usernames from video-sharing site Dailymotion, one of the biggest video platforms in the world.
• Expedia December 5, 2016 A former Expedia IT professional admits to illegally trading on secrets he discovered by hacking his own company's senior executives.
• MrExcel December 5, 2016 In December 2016, the forum for the Microsoft Excel tips and solutions site Mr Excel suffered a data breach. The hack of the vBulletin forum led to the exposure of over 366k accounts along with email and IP addresses, dates of birth and salted passwords hashed with MD5. The owner of the MrExcel forum subsequently self-submitted the data to HIBP.
• Intercom Wireless Frequency System of McDonald's at the New Bern, N.C December 4, 2016 The Intercom Wireless Frequency System of McDonald's at the New Bern, N.C is hacked and broadcasts unexpected messages to customers.
• National Assembly of Ecuador (asambleanacional.gob.ec) December 4, 2016 • [ hack, government ] Kapustkiy breaches the National Assembly of Ecuador and leaks the data via PasteBin.
• Appalachian State University December 3, 2016 • [ leak, education ] A group called AppState Leaks releases the data of 1,768 student from Appalachian State University.
• catropaejb.com.ve December 2, 2016 Kapustkiy hacks a website belonging to the Venezuelan army (catropaejb.com.ve) and exposes a total of 3,000 accounts.
• Central Bank of Russia December 2, 2016 The Central Bank of Russia confirms that in 2016 unknown hackers stole 2 billion rubles, equivalent to $31 million from accounts of the Central Bank.
• Health Solutions December 2, 2016 The website of Health Solutions, one of the largest diagnostic laboratories in India, is breached, with hackers accessing a database that included no less than 35,000 medical records, including HIV reports for registered patients.
• Professional football players December 2, 2016 A group called Football Leaks dumps 1.9 terabytes of data, covering 18.6 million private documents, related to professional football players. The documents are handed over to the German publication Der Spiegel.
• Shiseido Co. December 2, 2016 Japanese cosmetics maker Shiseido Co. says that the online store run by subsidiary IPSA Co. has suffered illegal access and that personal information on about 420,000 customers may have leaked as a result.
• Saudi Arabian Monetary Agency December 2, 2016 • [ hack, malware, finance ] Eight Saudi institutions are hit by a destructive cyber attack allegedly generating from Iran, carried on using a new version of the infamous Shamoon Malware. Among the victims is the Saudi Arabian Monetary Agency, the country's central bank.
• Biohack.me December 2, 2016 In December 2016, the forum for the biohacking website Biohack.me suffered a data breach that exposed 3.4k accounts. The data included usernames, email addresses and hashed passwords along with the private messages of forum members. The data was self-submitted to HIBP by the Biohack.me operators.
• Channel 2 December 1, 2016 • [ hack, technology ] Two main news channels in Israel were hacked and the attackers broadcasted a 30-second clip showing images of Muslim holy sites and Quranic scriptures.
• Saudi Arabian Ministry of Transportation December 1, 2016 • [ hack, malware, government ] An Iranian threat actor used malware known as Shamoon 2.0 to compromise and destroy computers at the General Authority of Civil Aviation of Saudi Arabia.
• Post Office December 1, 2016 • [ hack, ddos, technology ] Thousands of TalkTalk and Post Office customers have had their internet access cut by an attack targeting certain types of internet routers.
• Warmane December 1, 2016 In approximately December 2016, the online service for World of Warcraft private servers Warmane suffered a data breach. The incident exposed over 1.1M accounts including usernames, email addresses, dates of birth and salted MD5 password hashes. The data was subsequently extensively circulated online and was later provided to HIBP by whitehat security researcher and data analyst Adam Davies.
• FashionFantasyGame December 1, 2016 • [ leak, misconfiguration, technology ] In late 2016, the fashion gaming website Fashion Fantasy Game suffered a data breach. The incident exposed 2.3 million unique user accounts and corresponding MD5 password hashes with no salt. The data was contributed to Have I Been Pwned courtesy of rip@creep.im.
• Youku December 1, 2016 • [ leak, technology ] In late 2016, the online Chinese video service Youku suffered a data breach. The incident exposed 92 million unique user accounts and corresponding MD5 password hashes. The data was contributed to Have I Been Pwned courtesy of rip@creep.im.