The Breach Files

Every breach worth understanding

Who was hit, what was taken, how many people it reached, and what it means for you. Built from public breach records and updated every day.

5,929,170,764Accounts exposed
54Breaches in the current feed
8Years covered

By year

2026
110,262,653
2025
2,638,323,763
2024
1,192,214,946
2023
42,301,488
2022
100,901,839
2021
464,761,961
2020
758,243,062
2019
622,161,052

The archive

Double Counter 4 October 2026

274,922 accounts

Email addresses · Geographic locations · Names · Usernames

Moderate · 39
Medela 7 September 2026

423,947 accounts

Email addresses · Employers · Job titles · Names

Severe · 61
Neogen 29 August 2026

435,963 accounts

Email addresses · Employers · Job titles · Names

Serious · 56
McKesson 21 August 2026

6,404,340 accounts

Dates of birth · Email addresses · Employers · Genders

Severe · 73
Carhartt 13 August 2026

12,933,413 accounts

Email addresses · Names · Phone numbers · Physical addresses

Severe · 67
Sharecare 12 August 2026

318,185 accounts

Dates of birth · Email addresses · Employers · Genders

Serious · 59
CyrusOne 5 August 2026

373,460 accounts

Email addresses · Employers · Job titles · Names

Serious · 55
Chess.com (2026) 3 August 2026

4,653,212 accounts

Email addresses · Geographic locations · Names · Usernames

Serious · 50
Gîtes de France 16 May 2026

117,574 accounts

Booking details · Email addresses · Names · Phone numbers

Serious · 49
McGraw Hill 10 April 2026

13,500,136 accounts

Email addresses · Names · Phone numbers · Physical addresses

Severe · 67
Paidwork 29 March 2026

23,272,765 accounts

Bank account numbers · Dates of birth · Device information · Education levels

Severe · 75
Addi 25 March 2026

34,532,941 accounts

Age groups · Credit scores · Device information · Email addresses

Severe · 77
CarGurus 14 February 2026

12,461,887 accounts

Email addresses · IP addresses · Names · Phone numbers

Severe · 68
Crunchbase 22 January 2026

559,908 accounts

Email addresses · Employers · Job titles · Names

Serious · 57
SoundCloud 15 December 2025

29,815,722 accounts

Avatars · Email addresses · Geographic locations · Names

Serious · 58
Suno 25 November 2025

55,282,226 accounts

Email addresses · Names · Partial credit card data · Phone numbers

Severe · 76
Under Armour 17 November 2025

72,742,892 accounts

Dates of birth · Email addresses · Genders · Geographic locations

Severe · 68
Canadian Tire 2 October 2025

38,306,562 accounts

Dates of birth · Email addresses · Genders · Names

Severe · 77
Prosper 1 September 2025

17,605,276 accounts

Browser user agent details · Credit status information · Dates of birth · Email addresses

Severe · 74
SY
Synthient Credential Stuffing Threat Data 11 April 2025

1,957,476,021 accounts

Email addresses · Passwords

Critical · 84
SY
Synthient Stealer Log Threat Data 11 April 2025

182,962,095 accounts

Email addresses · Passwords

Critical · 83
AL
ALIEN TXTBASE Stealer Logs 15 February 2025

284,132,969 accounts

Email addresses · Passwords

Critical · 84
1win 2 November 2024

96,166,543 accounts

Dates of birth · Email addresses · Geographic locations · IP addresses

Critical · 81
Hot Topic 19 October 2024

56,904,909 accounts

Dates of birth · Email addresses · Genders · Names

Severe · 78
Assurance Retraite 1 September 2024

70,372 accounts

Dates of birth · Email addresses · Family members' names · Government issued IDs

Serious · 53
Burger King Russia 25 August 2024

3,155,792 accounts

Dates of birth · Email addresses · Genders · Geographic locations

Severe · 61
NO
Not SOCRadar 3 August 2024

282,478,425 accounts

Email addresses

Serious · 53
Advance Auto Parts 5 June 2024

79,243,727 accounts

Email addresses · Names · Phone numbers · Physical addresses

Severe · 74
CO
Combolists Posted to Telegram 28 May 2024

361,468,099 accounts

Email addresses · Passwords · Usernames

Critical · 83
The Post Millennial 2 May 2024

56,973,345 accounts

Email addresses · Genders · IP addresses · Names

Severe · 79
NA
National Public Data 9 April 2024

133,957,569 accounts

Dates of birth · Email addresses · Genders · Government issued IDs

Severe · 77
DemandScience by Pure Incubation 28 February 2024

121,796,165 accounts

Email addresses · Employers · Job titles · Names

Severe · 78
Hathway 17 December 2023

4,670,080 accounts

Device information · Email addresses · IP addresses · Names

Severe · 69
Blooms Today 11 November 2023

3,184,010 accounts

Email addresses · Names · Partial credit card data · Phone numbers

Severe · 64
PlayCyberGames 9 August 2023

3,681,753 accounts

Email addresses · Passwords · Usernames

Severe · 65
Genesis Market 5 April 2023

8,000,000 accounts

Browser user agent details · Credit card CVV · Credit cards · Dates of birth

Severe · 76
Angel One 1 April 2023

6,765,054 accounts

Bank account numbers · Dates of birth · Email addresses · Financial investments

Severe · 70
Eye4Fraud 25 January 2023

16,000,591 accounts

Email addresses · IP addresses · Names · Partial credit card data

Severe · 74
RailYatri 26 December 2022

23,209,732 accounts

Email addresses · Genders · Names · Phone numbers

Severe · 64
Hjedd 18 July 2022

13,204,029 accounts

Email addresses · IP addresses · Passwords · Usernames

Severe · 77
QuestionPro 21 May 2022

22,229,637 accounts

Browser user agent details · Email addresses · IP addresses · Survey results

Serious · 52
Mangatoon 13 May 2022

23,040,238 accounts

Auth tokens · Avatars · Email addresses · Genders

Severe · 75
CDEK 9 March 2022

19,218,203 accounts

Email addresses · Names · Phone numbers

Serious · 55
PU
Public Business Data 19 August 2021

27,917,714 accounts

Dates of birth · Email addresses · Job titles · Names

Severe · 74
LinkedIn Scraped Data (2021) 8 April 2021

125,698,496 accounts

Education levels · Email addresses · Genders · Geographic locations

Severe · 64
Domino's India 24 March 2021

22,527,655 accounts

Email addresses · Names · Phone numbers · Physical addresses

Severe · 70
Luxottica 16 March 2021

77,093,812 accounts

Dates of birth · Email addresses · Genders · Names

Severe · 77
Twitter (200M) 1 January 2021

211,524,284 accounts

Email addresses · Names · Social media profiles · Usernames

Severe · 62
CI
Cit0day 4 November 2020

226,883,414 accounts

Email addresses · Passwords

Severe · 74
Gravatar 3 October 2020

113,990,759 accounts

Email addresses · Names · Usernames

Serious · 58
Nitro 28 September 2020

77,159,696 accounts

Email addresses · Names · Passwords

Severe · 78
Wattpad 29 June 2020

268,765,495 accounts

Bios · Dates of birth · Email addresses · Genders

Critical · 85
Tokopedia 17 April 2020

71,443,698 accounts

Dates of birth · Email addresses · Genders · Names

Critical · 80
DA
Data Enrichment Exposure From PDL Customer 16 October 2019

622,161,052 accounts

Email addresses · Employers · Geographic locations · Job titles

Severe · 79

Breach records come from Have I Been Pwned and are used under a CC BY 4.0 licence. Severity scoring and the analysis of what each exposed field means are MyRecon's own, computed from the record so that every claim traces back to a value in it. Editorial commentary is marked as such on each article, and the long-form reporting lives in the case files, where every page cites its sources.