The Breach Files

Every breach worth understanding

Who was hit, what was taken, how many people it reached — and what it means for you. Built from public breach records and updated every day.

2,792,988,213Accounts exposed
12Breaches in the archive
5Years covered

By year

2026
57,805,706
2025
2,085,501,139
2024
579,430,807
2023
24,000,591
2022
46,249,970

The archive

Paidwork 29 March 2026

23,272,765 accounts

Bank account numbers · Dates of birth · Device information · Education levels

Severe · 75
Addi 25 March 2026

34,532,941 accounts

Age groups · Credit scores · Device information · Email addresses

Severe · 77
Suno 25 November 2025

55,282,226 accounts

Email addresses · Names · Partial credit card data · Phone numbers

Severe · 76
Under Armour 17 November 2025

72,742,892 accounts

Dates of birth · Email addresses · Genders · Geographic locations

Severe · 68
SY
Synthient Credential Stuffing Threat Data 11 April 2025

1,957,476,021 accounts

Email addresses · Passwords

Critical · 84
1win 2 November 2024

96,166,543 accounts

Dates of birth · Email addresses · Geographic locations · IP addresses

Critical · 81
CO
Combolists Posted to Telegram 28 May 2024

361,468,099 accounts

Email addresses · Passwords · Usernames

Critical · 83
DemandScience by Pure Incubation 28 February 2024

121,796,165 accounts

Email addresses · Employers · Job titles · Names

Severe · 78
Genesis Market 5 April 2023

8,000,000 accounts

Browser user agent details · Credit card CVV · Credit cards · Dates of birth

Severe · 76
Eye4Fraud 25 January 2023

16,000,591 accounts

Email addresses · IP addresses · Names · Partial credit card data

Severe · 74
RailYatri 26 December 2022

23,209,732 accounts

Email addresses · Genders · Names · Phone numbers

Severe · 64
Mangatoon 13 May 2022

23,040,238 accounts

Auth tokens · Avatars · Email addresses · Genders

Severe · 75

Breach records come from Have I Been Pwned and are used under a CC BY 4.0 licence. Severity scoring, the analysis of what each field means, and everything else on these pages is MyRecon's own and is generated from the records rather than written by a language model.