Data breaches by what they exposed
Which data breaches exposed private messages?
These are the public data breaches that exposed private messages, newest first. Open one to see when it happened, how many accounts it touched and the steps for what it exposed.
01
Which breaches are on this list?
| Breach | Happened | Accounts | Exposed |
|---|---|---|---|
| KomikoAI | February 2026 | 1,060,191 | prompts typed into the service, email addresses, forum posts and names |
| Toy Battles | February 2026 | 1,017 | chat logs, email addresses, IP addresses (where you connected from) and usernames |
| BreachForums (2025) | August 2025 | 672,247 | passwords, private messages, email addresses, forum posts and usernames |
| BitView | December 2024 | 63,127 | passwords, dates of birth, private messages, email addresses and bios |
| The Real World | November 2024 | 324,382 | chat logs, email addresses and usernames |
| AnimeLeague | July 2024 | 192,134 | passwords, dates of birth, phone numbers, private messages and email addresses |
| Tigo | March 2023 | 700,394 | private messages, email addresses, device information, genders and general locations |
| The Kodi Foundation | February 2023 | 400,635 | passwords, dates of birth, private messages, email addresses and browser details |
| BreachForums | November 2022 | 212,156 | passwords, private messages, email addresses, IP addresses (where you connected from) and usernames |
| Brand New Tube | August 2022 | 349,627 | passwords, private messages, email addresses, genders and IP addresses (where you connected from) |
| ZAP-Hosting | November 2021 | 746,682 | home addresses, phone numbers, chat logs, email addresses and browser details |
| Liker | March 2021 | 465,141 | sign-in tokens, passwords, security questions and answers, dates of birth and phone numbers |
| Nulled.ch | May 2020 | 43,491 | passwords, private messages, email addresses, IP addresses (where you connected from) and usernames |
| OGUsers (2020 breach) | April 2020 | 263,189 | passwords, private messages, email addresses, IP addresses (where you connected from) and usernames |
| Cracked.to | July 2019 | 749,161 | passwords, private messages, email addresses, IP addresses (where you connected from) and usernames |
| Void.to | June 2019 | 95,431 | passwords, private messages, email addresses, IP addresses (where you connected from) and usernames |
| Social Engineered | June 2019 | 89,392 | passwords, private messages, email addresses, IP addresses (where you connected from) and usernames |
| Ordine Avvocati di Roma | May 2019 | 41,960 | passwords, phone numbers, email messages, email addresses and general locations |
| Aimware | April 2019 | 305,470 | passwords, private messages, email addresses, IP addresses (where you connected from) and usernames |
| devkitPro | February 2019 | 1,508 | passwords, private messages and email addresses |
| OGUsers (2019 breach) | December 2018 | 161,143 | passwords, private messages, email addresses, IP addresses (where you connected from) and usernames |
| Technic | November 2018 | 265,410 | passwords, chat logs, private messages, email addresses and IP addresses (where you connected from) |
| Light's Hope | June 2018 | 30,484 | passwords, dates of birth, private messages, email addresses and general locations |
| Appartoo | March 2017 | 49,681 | sign-in tokens, passwords, home addresses, private messages and email addresses |
| Ethereum | December 2016 | 16,431 | passwords, private messages, email addresses, IP addresses (where you connected from) and usernames |
| Biohack.me | December 2016 | 3,402 | passwords, private messages, email addresses and usernames |
| MDPI | August 2016 | 845,012 | email messages, email addresses, IP addresses (where you connected from) and names |
| AKP Emails | July 2016 | 917,461 | email messages and email addresses |
| Teracod | May 2016 | 97,151 | passwords, payment histories, private messages, email addresses and avatars |
| Nulled.cr | May 2016 | 599,080 | passwords, dates of birth, private messages, email addresses and IP addresses (where you connected from) |
| KnownCircle | April 2016 | 1,957,600 | passwords, home addresses, phone numbers, email messages and email addresses |
| Patreon | October 2015 | 2,330,382 | passwords, payment histories, home addresses, private messages and email addresses |
| Hacking Team | July 2015 | 32,310 | email messages and email addresses |
| Telecom Regulatory Authority of India | April 2015 | 107,776 | email messages and email addresses |
| Boxee | March 2014 | 158,093 | historical passwords, passwords, dates of birth, private messages and email addresses |
| Quantum Booter | March 2014 | 48,592 | passwords, private messages, email addresses, IP addresses (where you connected from) and usernames |
| Cannabis.com | February 2014 | 227,746 | historical passwords, passwords, dates of birth, private messages and email addresses |
| Verified | January 2014 | 16,919 | historical passwords, passwords, private messages, email addresses and IP addresses (where you connected from) |
| Astropid | December 2013 | 5,788 | passwords, private messages, email addresses, instant messenger identities and IP addresses (where you connected from) |
| Vodafone | November 2013 | 56,021 | passwords, credit cards, government ID numbers, home addresses and phone numbers |
| Win7Vista Forum | September 2013 | 202,683 | passwords, private messages, email addresses, instant messenger identities and IP addresses (where you connected from) |
| Lounge Board | August 2013 | 45,018 | passwords, private messages, email addresses, IP addresses (where you connected from) and names |
| WHMCS | May 2012 | 134,047 | passwords, part of payment card numbers, payment histories, home addresses and email messages |
03
Is my address in a breach?
Enter your email address. We check that one address against monitored breach databases and show which breaches list it and what each exposed.
No account needed. We keep the address you check, when, and how many breach records it was found in, to prevent abuse, until you ask us to delete it. Privacy