Published file metadata, source observations, indicators, and research history in one bounded catalog.
20Reachable catalog records
1 / 1Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
src_cbc45cf1e1acfaf7eaCollection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
20 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
In August 2026, millions of records allegedly sourced from Chess.com were posted online. The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and data relating to users' Chess.com accounts. Analysis of the data suggested it had been obtained by scraping. When loaded into HIBP, 99% of the email addresses had already appeared in previous data breaches
First reported Sep 13, 2026 13:09 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In August 2026, data centre operator CyrusOne was the target of a ShinyHunters "pay or leak" extortion attempt. The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to users, sales leads and CyrusOne employees. The data largely consisted of corporate contact information, including names, physical addresses, ph
First reported Oct 07, 2026 23:19 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published a substantial corpus of data they alleged was sourced from the company, which included 6.4M unique email addresses among other personal and corporate data attributes. The impacted data related to a range of individuals and roles, including
First reported Sep 10, 2026 05:45 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In July 2025, the German news service NIUS suffered a data breach which was subsequently leaked publicly. The data included 6k unique email addresses along with names, physical addresses and payment details for purchases including either IBANs or partial credit card data (masked card number, type and expiry).
First reported Aug 23, 2026 22:25 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates. The breach resulted in the exposure of 145k unique email addresses along with usernames and passwords stored as either MD5 or PBKDF2 hashes. OTW self-submitted the exposed data to HIBP.
First reported Aug 19, 2026 02:09 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In August 2026, Manchester Airports Group (MAG) disclosed a data breach impacting their services. The incident was later claimed by the FulcrumSec hacking group, who subsequently published email addresses and phone numbers relating to 8.8M customers of Manchester, Stansted and East Midlands airports. The data contained personal information relating to airport services, including vehicle registrati
First reported Sep 02, 2026 07:36 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In September 2026, Swiss medical device company Medela was the target of a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the breach was later published publicly and included 424k unique email addresses belonging predominantly to healthcare professionals, Medela staff and leads. The exposed data consisted primarily of corporate contact information, including names, p
First reported Sep 30, 2026 11:48 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k unique email addresses along with names, usernames, dates of birth, genders and approximate geographic locations (city, province and postcode). It remains unclear whether the data was obtained via unintentionally exposed website features or a security vulnera
First reported Aug 22, 2026 07:17 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack. The group subsequently published data allegedly obtained from the company, which included 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchases.
First reported Aug 19, 2026 03:15 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In October 2024, news of a data breach exposing Burger King Russia customers broke following an August attack on the Mindbox marketing automation platform. The breach exposed 3.2M unique email addresses along with names, genders, dates of birth, phone numbers and approximate geolocations, with the data spanning 2018 to August 2024. Burger King Russia acknowledged the incident and advised it did no
First reported Sep 21, 2026 13:54 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from the company, including 732k unique email addresses and other personal information relating to leads, customers and Brinks staff such as name, phone numbers and physical addresses. The data also included purchases from Brinks along with partial
First reported Aug 08, 2026 10:44 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In August 2026, the Alcon eye care company was named in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly sourced from Alcon containing 218k unique email addresses along with other largely corporate B2B contact fields, including name, phone number and physical address.
First reported Aug 09, 2026 10:04 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In July 2026, the cloud-based business communications platform RingCentral was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they claimed was obtained from the platform, which included 1.6M unique email addresses along with names, physical addresses and phone numbers. In their disclosure notice, RingCentral advised that the incident affected "
First reported Aug 13, 2026 10:54 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. In its disclosure notice, Double Counter advised that attackers gained access to a subset of its data. A corpus of data was subsequently published publicly and contained 275k unique email addresses and Discord usernames. A small number of record
First reported Oct 07, 2026 05:42 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In 2019, the now-defunct B2B marketing leads database service LimeLeads suffered a data breach due to an exposed, unsecured Elasticsearch server. The incident exposed tens of millions of records of largely corporate contact data containing 17.8M unique email addresses, along with phone numbers, employers, job titles and geographic locations including state, city and postcode.
First reported Sep 22, 2026 08:02 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In August 2026, clothing retailer Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly obtained from the company including 12.9M unique email addresses, names, phone numbers and physical addresses. The published corpus also contained millions of synthetic records that did not relate to real individuals and were excluded from th
First reported Aug 25, 2026 21:34 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data it alleged was taken from the company, including 276k unique email addresses along with names, physical addresses, job titles and phone numbers. The data encompassed a combination of contacts, internal users and leads.
First reported Aug 05, 2026 23:39 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In August 2026, the French intellectual property software and services company Questel was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published an extensive corpus of data they alleged was obtained from the company, largely comprising corporate contact information associated with sales leads, support cases and marketing activities, with 1.2M unique email
First reported Sep 01, 2026 04:49 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign. The group claimed to have obtained data from the company's cancer diagnostics business, which they later published publicly. The breach contained 10.9M unique email addresses belonging to customers, patients and healthcare providers, along with names, addresses, phone
First reported Aug 07, 2026 06:27 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
In July 2024, the Indian stock brokerage firm Angel One confirmed that data leaked online related to a breach that occurred in April 2023. The leaked data included 7.9M user records containing 6.8M unique email addresses, along with names, physical addresses, phone numbers, bank account numbers, Permanent Account Numbers (PANs) and portfolio holdings. Angel One emphasised that the breach "has no i
First reported Oct 07, 2026 03:45 UTCCatalog metadata updated Oct 08, 2026 03:46 UTCOpen evidence record
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.