Data breaches by what they exposed

Which data breaches exposed private messages?

These are the public data breaches that exposed private messages, newest first. Open one to see when it happened, how many accounts it touched and the steps for what it exposed.

01

Which breaches are on this list?

BreachHappenedAccountsExposed
KomikoAIFebruary 20261,060,191prompts typed into the service, email addresses, forum posts and names
Toy BattlesFebruary 20261,017chat logs, email addresses, IP addresses (where you connected from) and usernames
BreachForums (2025)August 2025672,247passwords, private messages, email addresses, forum posts and usernames
BitViewDecember 202463,127passwords, dates of birth, private messages, email addresses and bios
The Real WorldNovember 2024324,382chat logs, email addresses and usernames
AnimeLeagueJuly 2024192,134passwords, dates of birth, phone numbers, private messages and email addresses
TigoMarch 2023700,394private messages, email addresses, device information, genders and general locations
The Kodi FoundationFebruary 2023400,635passwords, dates of birth, private messages, email addresses and browser details
BreachForumsNovember 2022212,156passwords, private messages, email addresses, IP addresses (where you connected from) and usernames
Brand New TubeAugust 2022349,627passwords, private messages, email addresses, genders and IP addresses (where you connected from)
ZAP-HostingNovember 2021746,682home addresses, phone numbers, chat logs, email addresses and browser details
LikerMarch 2021465,141sign-in tokens, passwords, security questions and answers, dates of birth and phone numbers
Nulled.chMay 202043,491passwords, private messages, email addresses, IP addresses (where you connected from) and usernames
OGUsers (2020 breach)April 2020263,189passwords, private messages, email addresses, IP addresses (where you connected from) and usernames
Cracked.toJuly 2019749,161passwords, private messages, email addresses, IP addresses (where you connected from) and usernames
Void.toJune 201995,431passwords, private messages, email addresses, IP addresses (where you connected from) and usernames
Social EngineeredJune 201989,392passwords, private messages, email addresses, IP addresses (where you connected from) and usernames
Ordine Avvocati di RomaMay 201941,960passwords, phone numbers, email messages, email addresses and general locations
AimwareApril 2019305,470passwords, private messages, email addresses, IP addresses (where you connected from) and usernames
devkitProFebruary 20191,508passwords, private messages and email addresses
OGUsers (2019 breach)December 2018161,143passwords, private messages, email addresses, IP addresses (where you connected from) and usernames
TechnicNovember 2018265,410passwords, chat logs, private messages, email addresses and IP addresses (where you connected from)
Light's HopeJune 201830,484passwords, dates of birth, private messages, email addresses and general locations
AppartooMarch 201749,681sign-in tokens, passwords, home addresses, private messages and email addresses
EthereumDecember 201616,431passwords, private messages, email addresses, IP addresses (where you connected from) and usernames
Biohack.meDecember 20163,402passwords, private messages, email addresses and usernames
MDPIAugust 2016845,012email messages, email addresses, IP addresses (where you connected from) and names
AKP EmailsJuly 2016917,461email messages and email addresses
TeracodMay 201697,151passwords, payment histories, private messages, email addresses and avatars
Nulled.crMay 2016599,080passwords, dates of birth, private messages, email addresses and IP addresses (where you connected from)
KnownCircleApril 20161,957,600passwords, home addresses, phone numbers, email messages and email addresses
PatreonOctober 20152,330,382passwords, payment histories, home addresses, private messages and email addresses
Hacking TeamJuly 201532,310email messages and email addresses
Telecom Regulatory Authority of IndiaApril 2015107,776email messages and email addresses
BoxeeMarch 2014158,093historical passwords, passwords, dates of birth, private messages and email addresses
Quantum BooterMarch 201448,592passwords, private messages, email addresses, IP addresses (where you connected from) and usernames
Cannabis.comFebruary 2014227,746historical passwords, passwords, dates of birth, private messages and email addresses
VerifiedJanuary 201416,919historical passwords, passwords, private messages, email addresses and IP addresses (where you connected from)
AstropidDecember 20135,788passwords, private messages, email addresses, instant messenger identities and IP addresses (where you connected from)
VodafoneNovember 201356,021passwords, credit cards, government ID numbers, home addresses and phone numbers
Win7Vista ForumSeptember 2013202,683passwords, private messages, email addresses, instant messenger identities and IP addresses (where you connected from)
Lounge BoardAugust 201345,018passwords, private messages, email addresses, IP addresses (where you connected from) and names
WHMCSMay 2012134,047passwords, part of payment card numbers, payment histories, home addresses and email messages
03

Is my address in a breach?

Enter your email address. We check that one address against monitored breach databases and show which breaches list it and what each exposed.

No account needed. We keep the address you check, when, and how many breach records it was found in, to prevent abuse, until you ask us to delete it. Privacy