X XFediYour place in the Fediverse
XFEDI

Remote profile

ActivityPub
Profile banner

Have I Been Pwned

@[email protected]

Check if you have an email address or password that has been compromised in a data breach. Created and maintained by @troyhunt

Open remote profile ↗
Posts
Have I Been Pwned@[email protected]

New breach: Gîtes de France suffered a breach in May which exposed 118k unique email addresses alongside names, phone numbers, physical addresses and booking details. 76% of addresses were already in @haveibeenpwned. Read more: https://haveibeenpwned.com/Breach/GitesDeFrance

Have I Been PwnedHave I Been Pwned: Gîtes de France Data BreachIn May 2026, the French holiday rental network Gîtes de France suffered a data breach affecting some of its departmental branches. The incident exposed hundreds of thousands of customer records, including 118k unique email addresses alongside names, phone numbers, postal addresses and booking details.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New breach: In January, ShinyHunters targeted Crunchbase in a "pay or leak" extortion campaign. Published data included 560k email addresses, names, phone numbers, physical addresses, job titles and employers. 53% were already in @haveibeenpwned. More: https://haveibeenpwned.com/Breach/Crunchbase

Have I Been PwnedHave I Been Pwned: Crunchbase Data BreachIn January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt. Data allegedly obtained from the company was subsequently published publicly and included 560k unique email addresses, largely belonging to leads and business contacts. Other data included names, physical addresses, phone numbers, job titles, employers and LinkedIn
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New breach: An August ShinyHunters extortion campaign against Sharecare allegedly exposed 318k email addresses, mostly business contacts, plus some Brazilian health plan member data. 73% were already in @haveibeenpwned. More: https://haveibeenpwned.com/Breach/Sharecare

Have I Been PwnedHave I Been Pwned: Sharecare Data BreachIn August 2026, the digital health company Sharecare was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the data consisted of B2B sales and marketing records with names, physical addresses, phone numbers, job titles and employers. The data also includ
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New breach: Neogen was targeted by ShinyHunters in August. Data allegedly stolen from the company was later published, including 436k unique email addresses, names and other mostly corporate contact details. 59% were already in @haveibeenpwned. More: https://haveibeenpwned.com/Breach/Neogen

Have I Been PwnedHave I Been Pwned: Neogen Data BreachIn August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters "pay or leak" extortion attempt. The group later published data it claimed had been obtained from Neogen. The data consisted largely of corporate contact records and included 436k unique email addresses from mailing lists, employee records and other contacts.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New breach: CyrusOne faced a ShinyHunters extortion attempt in August. Alleged breach data was later published: 373k unique email addresses, names and largely corporate contact info for users and leads. 84% were already in @haveibeenpwned. Read more: https://haveibeenpwned.com/Breach/CyrusOne

Have I Been PwnedHave I Been Pwned: CyrusOne Data BreachIn August 2026, data centre operator CyrusOne was the target of a ShinyHunters "pay or leak" extortion attempt. The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to users, sales leads and CyrusOne employees. The data largely consisted of corporate contact information, including names, physical addresses, ph
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New breach: Discord server protection service Double Counter suffered a breach earlier this week due to a Metabase vulnerability. The data included 275k unique email addresses and Discord usernames. 25% were already in @haveibeenpwned. Read more: https://haveibeenpwned.com/Breach/DoubleCounter

Have I Been PwnedHave I Been Pwned: Double Counter Data BreachIn October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. In its disclosure notice, Double Counter advised that attackers gained access to a subset of its data. A corpus of data was subsequently published publicly and contained 275k unique email addresses and Discord usernames. A small number of record
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New breach: Angel One had 7.9M customer records breached in 2023, including 6.8M unique email addresses. Data included name, physical address, phone number, bank account number, PAN and portfolio holdings. 53% were already in @haveibeenpwned. Read more: https://haveibeenpwned.com/Breach/AngelOne

Have I Been PwnedHave I Been Pwned: Angel One Data BreachIn July 2024, the Indian stock brokerage firm Angel One confirmed that data leaked online related to a breach that occurred in April 2023. The leaked data included 7.9M user records containing 6.8M unique email addresses, along with names, physical addresses, phone numbers, bank account numbers, Permanent Account Numbers (PANs) and portfolio holdings. Angel One emphasised that the breach "has no i
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New sensitive breach: Swiss medical device company Medela was targeted in a ShinyHunters extortion attack this month. Allegedly breached data was later published, including 424k unique email addresses. 62% were already in @haveibeenpwned. Read more: https://haveibeenpwned.com/Breach/Medela

Have I Been PwnedHave I Been Pwned: Medela Data BreachIn September 2026, Swiss medical device company Medela was the target of a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the breach was later published publicly and included 424k unique email addresses belonging predominantly to healthcare professionals, Medela staff and leads. The exposed data consisted primarily of corporate contact information, including names, p
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New breach: The LimeLeads B2B marketing platform (now defunct) had 17.8M unique email addresses exposed in 2019. Largely corporate contact data also included phone number, job title, employer and location. 50% were already in @haveibeenpwned. Read more: https://haveibeenpwned.com/Breach/LimeLeads

Have I Been PwnedHave I Been Pwned: LimeLeads Data BreachIn 2019, the now-defunct B2B marketing leads database service LimeLeads suffered a data breach due to an exposed, unsecured Elasticsearch server. The incident exposed tens of millions of records of largely corporate contact data containing 17.8M unique email addresses, along with phone numbers, employers, job titles and geographic locations including state, city and postcode.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New breach: Burger King Russia had 3.2M unique email addresses exposed via the Mindbox marketing automation platform in 2024. Data also included names, phone numbers, genders, DoBs and geolocations. 60% were already in @haveibeenpwned. Read more: https://haveibeenpwned.com/Breach/BurgerKingRussia

Have I Been PwnedHave I Been Pwned: Burger King Russia Data BreachIn October 2024, news of a data breach exposing Burger King Russia customers broke following an August attack on the Mindbox marketing automation platform. The breach exposed 3.2M unique email addresses along with names, genders, dates of birth, phone numbers and approximate geolocations, with the data spanning 2018 to August 2024. Burger King Russia acknowledged the incident and advised it did no
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New scrape: Last month, 4.6M email addresses from Chess[.]com were posted online with names, usernames and country, among other data. 99% were already in @haveibeenpwned, supporting the theory the data was scraped. Read more: https://haveibeenpwned.com/Breach/Chess2026

Have I Been PwnedHave I Been Pwned: Chess.com (2026) Data BreachIn August 2026, millions of records allegedly sourced from Chess.com were posted online. The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and data relating to users' Chess.com accounts. Analysis of the data suggested it had been obtained by scraping. When loaded into HIBP, 99% of the email addresses had already appeared in previous data breaches
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New sensitive breach: McKesson was targeted in a ShinyHunters extortion campaign last month. Allegedly sourced data was later published with 6.4M emails from marketing campaigns, patients, staff and others. 66% were already in @haveibeenpwned. More: https://haveibeenpwned.com/Breach/McKesson

Have I Been PwnedHave I Been Pwned: McKesson Data BreachIn August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published a substantial corpus of data they alleged was sourced from the company, which included 6.4M unique email addresses among other personal and corporate data attributes. The impacted data related to a range of individuals and roles, including
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New breach: Manchester Airports Group was breached last month, with FulcrumSec later publishing 8.7M email addresses. Data included phone numbers, vehicle registrations, parking history and airport purchases. 62% were already in @haveibeenpwned. More: https://haveibeenpwned.com/Breach/ManchesterAirportsGroup

Have I Been PwnedHave I Been Pwned: Manchester Airports Group Data BreachIn August 2026, Manchester Airports Group (MAG) disclosed a data breach impacting their services. The incident was later claimed by the FulcrumSec hacking group, who subsequently published email addresses and phone numbers relating to 8.8M customers of Manchester, Stansted and East Midlands airports. The data contained personal information relating to airport services, including vehicle registrati
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New breach: Questel was targeted in a ShinyHunters extortion campaign last month. Data allegedly from the company was published with 1.2M emails, names, employers, job titles, addresses and phone numbers. 51% were already in @haveibeenpwned. More: https://haveibeenpwned.com/Breach/Questel

Have I Been PwnedHave I Been Pwned: Questel Data BreachIn August 2026, the French intellectual property software and services company Questel was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published an extensive corpus of data they alleged was obtained from the company, largely comprising corporate contact information associated with sales leads, support cases and marketing activities, with 1.2M unique email
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Have I Been Pwned@[email protected]

New breach: Carhartt was the target of a ShinyHunters extortion campaign earlier this month. Data allegedly obtained from the company was later published, including 12.9M unique email addresses. 83% were already in @haveibeenpwned. Read more: https://haveibeenpwned.com/Breach/Carhartt

Have I Been PwnedHave I Been Pwned: Carhartt Data BreachIn August 2026, clothing retailer Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly obtained from the company including 12.9M unique email addresses, names, phone numbers and physical addresses. The published corpus also contained millions of synthetic records that did not relate to real individuals and were excluded from th
↩ Reply ♡ 0 · ↻ 0 ↗ Original