Available databases

In the fall of 2020, the FerretCheck checker database was published. This service searched for users in hacked databases for the game MineCraft and returned lists of their passwords. This was used to hack their accounts on game servers. The database included leaks from approximately 80 game servers, totaling 19 million lines. They contained nicknames, passwords in the form of AuthMe hashes, IP addresses and a total of 447 thousand emails.

In 2016, a leak occurred on the Russian medical portal “To the Doctor.” The data contains names, dates of birth, emails and passwords in the form of MD5 hashes. A total of 463 thousand records.

In July 2019, GetPaidTo's Earn Money Online from Home website experienced a data breach. The breach included email addresses, usernames and passwords stored as vBulletin hashes. A total of 92.8 thousand users were affected.

This is a now defunct American sports betting site. Around 2021, it suffered a leak that affected 22 thousand users. Names, emails, phone numbers, addresses and passwords were published in plain text.

Around April 2019, the cloud-based SMS platform ApexSMS (also known as "MobileDrip") suffered a data breach. Because of her, 88 million posts were published. The violation included full names, email addresses, physical addresses, IP addresses and phone numbers.

In June 2024, the automobile website Nzvsmst.ru was hacked. A dump of about 7 thousand lines was made publicly available. The data includes names, phone numbers, IP addresses and order data, as well as text reviews.

The online communication site Pally.live has been hacked. As a result, information about 624 thousand users became publicly available, including their nicknames, full names, emails and countries of residence.

In 2018, there was a leak from the compulsory health insurance fund in the Ulyanovsk region. The data contains telephone numbers, names, addresses, passport details and other information. In total there are more than 800 thousand records.

In November 2019, a dump of the online store “Westwing”, which sells designer items, appeared for sale on shadow forums. The published database contains information about clients, including emails, names, phone numbers, addresses, passwords in the form of MD5 hashes and Facebook accounts. There are only 1.5 million unique clients, but due to the fact that there are several tables in the database, the total number of rows exceeds 3.3 million.

In October 2022, hackers made the database of the job search service “Bitrix Jobs” publicly available. The database contained 1 million rows. The records included full name, desired positions, resume processing status and other data.

This is a collection of Gmail emails and passwords obtained from various leaks. It was published in August 2022 on a hacker forum and contained 283 thousand lines.

The Sanpid.com trading platform, specializing in heating, water supply and plumbing systems, leaked 52 thousand records. The network included data such as phone numbers, full names and emails.

In June 2020, crypto hardware wallet manufacturer Ledger suffered from a data leak. More than 1 million email addresses were exposed. The data was originally sold and then published in December 2020 and included names, physical addresses and phone numbers.

The leak occurred on the website opentable.com, which specializes in selecting and ordering tables in restaurants. The leak occurred in 2020 and contained 12 million email addresses and passwords.

Around June 2022, the Russian company Tele2 suffered a data leak. She revealed email addresses, full names, phone numbers and gender. In total, 7.5 million users were affected.

In October 2019, a data breach occurred on the Dutch prostitution forum Hookers.nl, exposing the personal information of sex workers and their clients. Hackers gained access to the forum through an unpatched vulnerability in vBulletin software. IP addresses, email addresses, usernames and bcrypt password hashes were published. A total of 291,000 participants were affected.

In 2020, a leak occurred on the Russian refrigerator forum HolodForum, which affected more than 70 thousand users. The leak includes names, emails, IP addresses and passwords as salted MD5 hashes.

In 2022, Ukrainian hackers made publicly available a database that, according to them, belongs to Russian Post and is called “Card Index”. Part of the database consisted of long-known leaks from the Compulsory Medical Insurance Fund, and part of it was new data. The database contained about 9 million users with information about their telephone numbers, addresses, dates of birth, passport data, TIN numbers and Snils. However, the data appears to be quite old.

In February 2016, a data leak occurred on the Elvinelol forum dedicated to WoW, as a result of which 10.7 thousand members were affected. The breach exposed email addresses, IP addresses, usernames and passwords as vBulletin hashes.

Two huge combo players called CompilationOfManyBreaches and 12Billion special appeared in February 2021 and September 2022, respectively. Each of them contained more than 3 billion unique emails and passwords. Most of the data was taken from collections 1-5 and combo player Ga$$Pacc, leaving only 211 million rows after removing them.

Around January 2021, the Dota 2 Hentai porn site suffered a data leak. The attack exposed usernames, email addresses and passwords stored as MD5 hashes. In total, 40.7 thousand users were affected.

Around 2011, Chinese gaming site 7k7k suffered a data breach that affected 9.1 million subscribers. The data contained usernames, email addresses, and passwords in plain text.

In June 2020, an AI training company called "Appen" suffered a data breach. The data of 5.9 million users was exposed and subsequently sold online. The data included email addresses and passwords as bcrypt hashes. Some records also contained employers' phone numbers and IP addresses.

In November 2008, audio player company COWON America (JetAudio) suffered a data breach that affected 17.5 thousand members. The hack included usernames, email addresses, dates of birth, IP addresses and passwords stored as vBulletin hashes.

This is a Russian website with information about all parliamentary elections in Russia. In 2020, all publicly available information from it was collected using parsing. The resulting database contains about a million records with the names and dates of birth of candidates, as well as information about the elections in which they participated.

Web development software company. Suffered from a hack on September 16, 2020, the published leak contains almost 850 thousand records. The data contains names, emails, dates of birth, IP addresses and passwords in the form of MD5 hashes with salt.

Around October 2022, a gaming buddy meeting website known as E-Pal suffered a data breach affecting 108,000 members. The leak exposed data including usernames, email addresses and purchases.

3Snet is a site that offers to earn money for any actions related to casinos and sports betting, which is reminiscent of working with a drop. There are several leaks of this service online, but only one of them is not fake. This leak appeared in December 2023 and contains names, emails, phone numbers and 330 thousand records.

This is a parsing of 2GIS online maps containing the company data indicated on it. Was collected and published between 2019 and 2020. The data contains contact telephone numbers and emails of companies, as well as their addresses, names and categories to which they belong.

In September 2019, a data leak occurred on the forums of the cybersecurity company Comodo, which affected 173 thousand participants. The breach included email addresses, usernames, IP addresses and passwords stored as MD5 hashes.

This is a major leak of a Russian government services website that occurred in 2021. It affected more than 7 million people. The data includes telephone numbers, names, mails, addresses, passport data, SNIS data and INN.

At the end of 2022, data likely taken from the Gemini crypto exchange was posted on a hacker forum. The data consisted of email addresses and phone numbers that Gemini later attributed to an incident at a third-party vendor. The numbers were in the format 123-XXX-7890. They are partial numbers and do not include the middle 3 digits. In total, 5.7 million users were affected.

In 2021, there was a leak from the official website of the Spanish automaker SEAT. Approximately 703 thousand user data was published, including names, emails, phone numbers and passwords.

In May 2017, the Canadian telecommunications company Bell suffered a data breach that exposed millions of customer records. The data was subsequently leaked online with a message from the attacker saying they were "exposing a significant portion of Bell.cas data due to their failure to cooperate with us" and threatening to leak more data. The affected data included more than 2 million unique email addresses and 153,000 survey results dating back to 2011 and 2012.

In January 2017, CrackingItaly suffered a data breach in which 18 thousand user posts were leaked from their forums. Passwords were in the form of bcrypt hashes.

In January 2023, the Ukrainian online sports goods store ExtremStyle suffered from a leak. A database of 128 thousand lines was published, which contains emails, phone numbers and client names.

Around September 2020, OASIS GAMES, "the world's leading game publisher", suffered a data breach. The breach exposed email addresses and passwords stored as MD5 hashes with the static salt “@legend.” In total, 471 thousand users were affected.

The Russian minecraft server LastCraft was hacked on May 28, 2017. The data contains 166 thousand users and includes nicknames, IPs and passwords in the form of AuthMe hashes.

A huge database of US residents, which was originally leaked by pompompurin on the now defunct RaidForum. The source is unknown, but data from more than 250 million American citizens can be found in this database. The data contains names, addresses, telephone numbers, geolocation, home and income information, nationality, date of birth. It also contained more than 100 million emails.

In mid-2011, data from the Chinese engineering website Civil Online was published. They contained 7.8 million accounts, including email addresses, IP addresses, usernames and MD5 password hashes.

In 2021, using parsing, a database of phone numbers of users of the Russian social network VKontakte was created. It remained private for a long time and began to spread only in the summer of 2023. The database contains phone numbers, names and account IDs. A total of 5.7 million records.

This database contains data on utility payments obtained from the website egaz.uz. This is one of the government services of Uzbekistan. The data contains telephone numbers, names, passports, dates of birth, balance data and so-called PINFL codes. A total of 3.5 million records. The leak occurred on 06/08/2024.

In February 2012, the self-proclaimed "Indonesian Largest Newbie Hacker Community" Hacker-Newbie Community suffered a data breach. The leak exposed usernames, email addresses, IP addresses, dates of birth and passwords stored as MyBB hashes. In total, 29.1 thousand users were affected.

Antares Trade is a distributor of household goods. In September 2022, it suffered a hack that affected 9 thousand user records and 116 thousand orders. The data contains phone numbers, names, passwords and order information.

At the beginning of 2023, the Russian stationery store Phoenix Plus suffered from a data leak. 2300 users were affected. The data contains emails, phone numbers, names, number of orders and their amount.

In 2024, the American network of hyperlocal sites Parkbench became a victim of black hat hackers. As a result of the leak, 620 thousand records containing information about full usernames, emails and passwords in the form of bcrypt hashes were leaked to the network.

The now defunct website Defineyolu.club was hacked in November 2019. 37 thousand users were affected. IP addresses, email addresses, usernames and passwords were published as salted MD5 hashes.

In 2020, there was a data leak from the JoyGames online platform dedicated to multiplayer browser games. About 980 thousand entries were published containing nicknames, emails, IP addresses and passwords in the form of MD5 hashes with salt.

Minehut is a server for the game Minecraft. In May 2019, its website suffered a data breach. The company said that a database backup had been obtained and that all affected users had been notified. 397 thousand email addresses were published. Passwords in the form of bcrypt hashes have also been compromised, but currently do not exist in the public domain.

In July 2022, a leak occurred in the Originalam.net printer equipment and supplies store. The database contains 193 thousand records, which include names, dates of birth, emails, telephone numbers and passwords without hashes.

This database contains a list of product suppliers obtained from an unknown source. The data contains 460 thousand lines and includes names, company names, addresses, mails, telephone numbers and TIN of organizations.

In May 2011, a data leak occurred on the Chinese Android site MuMaYi, which affected 132 thousand subscribers. The breach included email addresses, IP addresses, usernames, dates of birth and passwords stored as MD5 hashes.

In June 2022, Eye4Fraud, a fraud protection system for merchants, suffered a data breach. The breach exposed full names, email addresses, phone numbers, physical addresses and payment methods. In total, 532 thousand users were affected. It appears that online retailers were warned about this event in advance.

Sirena Travel is the largest air ticket booking system. Around 2005, it suffered a passenger data breach that affected 3 million customers. The published database included full names and passport details.

In February 2019, Iraq's Independent High Electoral Commission (IHEC) suffered a data breach that affected 24.3 million voters. The attack exposed full names, dates of birth, national identification cards, document numbers, location and voting information. Initially, this data could only be read through a special program.

In November 2015, Ancestry, also known as RootsWeb, suffered a data breach. The breach was not discovered until late 2017, when a file containing nearly 300,000 email addresses and unencrypted passwords was discovered.

This is a Ukrainian automobile website dedicated to the Opel brand. There is a publicly accessible database containing 71 thousand user records of this site. The data contains nicknames, emails and passwords in the form of MD5 hashes with salt.

In October 2019, 1.4 million accounts from the cryptocurrency wallet service GateHub were posted on a popular hacker forum. The service previously acknowledged a data breach in June, although with fewer accounts affected. The hack data included email addresses, mnemonic phrases, encrypted master keys, encrypted recovery keys, and bcrypt hashed passwords.

At the end of 2020, the website 8teenxxx.com, which provides access to adult content, suffered a data leak. The data of 68 thousand users was made publicly available. The data only includes emails and passwords in plain text.

On May 12, 2023, the database of the Italian motorcycle goods store ForeverMoto was published. The leak contains about 6 thousand users. Including full names, emails, dates of birth and passwords in the form of bcrypt or md5 hashes.

In 2020, a database of driver’s licenses from Ukraine began to be distributed on Telegram channels. The database contains more than 21 million unique records and includes names in Russian and Ukrainian, dates of birth, place of birth, addresses, tax identification numbers, passports and driver's licenses.

In February 2015, the BeepXtra.com website, which is a cloud service for storing loyalty cards from different clubs, suffered from a hack. An SQL dump was published containing names, emails, nicknames, IP addresses and passwords in the form of MD5 hashes with salt. A total of 760 thousand records in several tables.

Freelance.ru is a Russian job search site. In 2015, it was hacked and the data of 180 thousand users became publicly available. The database contained emails, phone numbers, nicknames and names.

At the end of 2017, NeedMine, a server for the game MineCraft, was hacked. 600 thousand entries were published with player nicknames, their IP addresses, a small number of emails and passwords in the form of AuthMe hashes.

In June 2020, the Mexican lending platform yotepresto.com was hacked. More than 1.4 million customers were affected by the breach, which exposed email addresses, IPs, usernames and passwords as bcrypt hashes.

In November 2020, a data leak occurred on the Centro Pokémon forums, affecting 71.8 thousand users. The attack exposed usernames, email addresses, IP addresses, dates of birth and passwords stored as vBulletin or bcrypt hashes.

On 07/07/2021, an alleged database of telegram bot users for breaking through the “Eye of God” was publicly available. It includes 774,000 records containing names, phone numbers, telegram account IDs and telegram nicknames. Later it turned out that this database was simply collected by parsing the bot’s eye and is not the base of its users.

In July 2021, the “Best Sports Betting Website in India and Asia” Fun88 suffered a data breach affecting 403 thousand members. The breach exposed full names, phone numbers, usernames and email addresses.

In March 2020, the now defunct Minecraft server OpDex was hacked. The data contains IP addresses, nicknames and passwords in plain text. A total of 83 thousand records.

On August 25, 2024, this Russian pharmacy chain was hacked. As a result, the tables of users (82 thousand records) and orders (143 thousand records) became publicly available. The data includes telephone numbers, mails, cities of residence and addresses of pharmacies used by clients.

The Ukrainian website Ohrana, which provides security and safety services, became a victim of a data leak on November 24, 2019. A database with information about 76 thousand users was leaked online, containing phone numbers, full names, IP addresses and, in some cases, comments from profiles.

In August 2023, the Russian ticket purchasing and booking service AtlasBus suffered from a data leak. The stolen database is rumored to contain data on 100 million tickets sold, but only a user table containing approximately 1.3 million people is publicly available. The data only includes emails, phone numbers and names.

Around August 2021, Intelligence X (intelx.io) was targeted by an attacker who scraped the Embeds section of the website. The released archive contained more than 80,000 pastes extracted from pastebin.com, pastie.org and skidpaste.org or IntelX. In total, the archive contained 46 million emails, many of which were accompanied by passwords.

A large collection of emails and passwords for them, collected in 2022 from leaks related to cryptocurrencies. Contains 71 million rows. Presumably used to hack accounts on crypto exchanges.

Arteza.com is an online store of goods for artists. In March 2023, a leak from this site appeared online, containing the data of 576,000 users. The data included emails, full names, dates of birth, locations and website balances.

Data from the website of the scientific electronic library of dissertations and abstracts DisserCat was collected using parsing in September 2024. Information about 54 thousand users was obtained, including their names and data on scientific works.

This is a Russian escort site. In 2021, profile data from this site was collected using parsing. A total of 8600 entries with phone numbers, nicknames, addresses and other data.

In November 2019, Serbian technology news website Benchmark had its forum hacked, exposing the records of 93,000 customers. The hack exposed IP and email addresses, usernames and passwords as salted MD5 hashes. The breach occurred because the forum was previously running on an outdated instance of vBulletin.

TV management service website AlltvRemote.in has suffered a data breach. As a result, information about 257 thousand users was exposed, including emails, nicknames, registration dates and hashed passwords.

On May 17, 2022, information about a leak from the Skolkovo business school appeared in telegram channels. The published data contains names, telephone numbers, dates of birth, places of work and positions, as well as passwords in the form of PBKDF2 hashes. In total, the leak contained more than a million records.

In 2019, the insurance company Acuity suffered a data breach. Because of it, the data of 242 million users was exposed. The data was published on raid forums by Crazyoldfart in 2021. The database contains household information and personal information about US citizens. Including full names, addresses, phone numbers, occupation, ethnicity and more. The leak did not contain any emails.

In August 2021, a well-known food delivery app and restaurant known as "Habib's Food Restaurant" suffered a data breach. The violation included full names, dates of birth, email addresses, CPF numbers and IP addresses. In total, 3.6 million users were affected.

Around January 2022, an online store owned by the French e-cigarette and vaping company Taklope suffered a data breach. The attack exposed full names, email addresses, dates of birth and passwords stored as MD5 hashes ($salt.$pass) with a static salt. In total, 269 thousand users were affected.

In November 2020, the Turkish game automation tool MemoryBreak suffered a data leak. The breach resulted in the disclosure of data including usernames, email addresses and passwords stored as MD5 hashes. In total, 40.7 thousand users were affected.

In December 2019, the now-defunct anime forum MyPirata suffered a data leak that affected 503,000 members. The breach included usernames, email addresses, IP addresses and passwords stored as MD5 hashes.

On April 27, 2023, hackers from NLB made publicly available the database of the Russian insurance company Alfastrakhovanie, owned by Alfabank. The file contains 1 million records with names, dates of birth, emails, phone numbers and passwords in the form of hashes. Hackers claim that there are 14 million records in the complete leak.

Combook is a Russian book site. At the end of 2023, a database of its users appeared, containing names, emails, phone numbers and addresses. A total of 116,000 records.

In 2023, the agency that installed the Steehold security control system suffered a data leak, as a result of which about 90 thousand records were published, including names, dates of birth, document numbers, as well as information about place of work and the presence of relatives.

In 2022, a combo player appeared on the Internet containing authorization data for various sites. It was obtained using viruses that steal saved login data in browsers. The leak contained approximately 150 million records. It indicated nicknames, emails and telephone numbers as logins and passwords in plain text, as well as the sites for which they were intended.

In January 2020, Barcelona-based dating app MobiFriends suffered a data breach. As a result, 3.5 million unique email addresses were exposed. The data also included usernames, gender, dates of birth and passwords in the form of MD5 hashes.

In 2007, the Russian telephone operator Megafon suffered from user leakage. Data from 100 thousand records containing telephone numbers, names, addresses and passport data of clients were made publicly available.

In January 2021, the database of the escort website EscortreViews.com became publicly available. The data of more than 400 thousand users was leaked into the network. The leak contains emails, nicknames, dates of birth and passwords in the form of MD5 hashes with salt.

In October 2020, online photo editing app Pixlr suffered a data breach that affected 1.9 million subscribers. The data included names, email addresses, social media profiles, country of origin of the company and passwords stored as SHA-512 hashes.

In March 2024, a file was made publicly available, according to the hacker, taken from the National Bureau of Credit History database (nbki.ru). The hacker claimed that he had 200 million records, but only 500 thousand were posted. The data contains names, phone numbers, passport details, dates of birth, regions and debt amounts. Most likely the data was downloaded from some microfinance organization. The leak occurred on February 4, 2024.

In May 2021, a data leak occurred on a clown forum called "ClownForum". The violation included email addresses and usernames. A total of 6.3 thousand participants were affected. The website has been down for over a year, simply displaying “Sorry, we are currently unavailable while we clean up the mess. Please come back later."

Around 2012, Chinese shopping site taobao.com suffered a data breach that affected more than 21 million subscribers. The data in the breach contains email addresses and passwords in plain text.

In September 2014, several account dumps appeared on the Russian Security Forum, including one with almost 5 million email addresses and passwords mainly for the mail.ru domain.

Around 2011, it became known about the alleged hacking of the dating site Zoosk.com. The data consists of 53 million records. They include email addresses and plain text passwords. However, there is no evidence that the data actually came from the Zoosk service. Zoosk later suffered another leak in 2020. It included 24 million users.

This Russian service allows you to check companies and legal entities, as well as search by INN. In 2024, data from this site was collected using scraping, which made it possible to collect 3.6 million records. The database contains telephone number, full name, address, INN, type of activity, income, data on the authorized balance sheet and other information.

In January 2016, account reseller EpicNPC suffered a data breach that affected 409,000 subscribers. The data included usernames, IP addresses, email addresses and passwords in the form of salted MD5 hashes.

In June 2020, Egyptian bus operator Swvl suffered a data breach that affected more than 4 million service users. The exposed data included names, email addresses, phone numbers, profile photos, partial credit card information (type and last 4 digits) and passwords in the form of bcrypt hashes.

Sirena Travel is the largest air ticket booking system. In 2006, it suffered a passenger data breach that affected 13 million customers. The published database included full names and passport details.

The My Business service center provides assistance to the self-employed and entrepreneurs. It was hacked in February 2023. The leak contains 119 thousand records with names, emails, phone numbers and dates of birth of clients.

Randizzon is a Hungarian dating site. It suffered a hack in July 2013 that resulted in the publication of nearly two million user records that included emails, names, hometowns, dates of birth and passwords in plain text.

In September 2023, a data leak occurred from the Russian microcredit organization Qzaem. Hackers made 500 thousand records publicly available and began selling the full version, containing 9.2 million lines. The data contains emails, phone numbers, names, nicknames, addresses, dates of birth, tax identification numbers, passports and credit card information. The organization never closed the vulnerability, which is why a second leak later occurred, which was made publicly available.

France's database of COVID-19 vaccine recipients suffered a leak in 2019. It contained 440 thousand records including full names, emails, phone numbers and addresses.

The go-gl.com link shortening service was hacked in October 2023. The data of 5.5 thousand users was made publicly available. Records include emails, nicknames and passwords in the form of MD5 hashes.

These are Indian mutual fund platform. In May 2021, it suffered a leak that affected 134 thousand users. The database contains names, addresses, dates of birth, telephone numbers, emails and other data.

In August 2022, the free book club BookCrossing suffered a data breach that affected 1.5 million members. The breach exposed email addresses, usernames, full names, dates of birth, IP addresses and passwords in clear text. The breach occurred because BookCrossing exposed a database backup that was almost 9 years old (January 13, 2013).

In June 2023, a hacker group made the database of the Yandex.Practicum service publicly available. The leak contains 300 thousand records with the names, nicknames, emails and telephone numbers of clients of this educational service.

Aerobus.rf is a Russian website that sells bus tickets to and from the airport. In May 2024, there was a leak on it, due to which data about 3,000 users and 60 thousand of their orders were published. The data contains names, phone numbers, emails, IP, passwords in the form of SHA1 hashes with salt and information about payment methods.

In December 2012, the now-defunct zombie apocalyptic MMO game TheWarZ suffered a data breach that affected 320,000 users. The leak exposed usernames, email addresses, IP addresses, dates of birth and passwords stored as vBulletin hashes.

In Russia there is a “Unified State Register of Individual Entrepreneurs” (USRIP). In 2022, there was a leak in it, as a result of which the data of 16.8 million Russians was published. A huge database of 140Gb included information about all individual entrepreneurs, including names, addresses, mails, businesses, occupations, passport details, dates of issue of certificates and legal codes - INN, OGRN, GRNIP, OGRNIP, SPVZ, OKVED and others.

In June 2018, a SQL dump of the Minecraft server MigosMc was published, containing about 55 thousand players, including nicknames, IP addresses and passwords in the form of SHA-256 hashes.

At the beginning of 2018, the LocateFamily website was hacked. This American site was created to search for people, for which it collects their personal data. The published version contains 140 thousand entries, but more than 11 million people were likely affected. Data includes telephone numbers, names and addresses.

At the end of 2016, a data dump from Rambler, sometimes called the “Russian Yahoo,” became publicly available. The leak contained 100 million accounts. It included email and simple text passwords. According to Rambler, the data is dated March 2014.

In August 2022, a Russian hacker group posted a file containing a database of the official website of the Krivoy Rog administration. The database contains 242 thousand lines, including the names and telephone numbers of Ukrainian citizens.

In January 2022, a vulnerability in the Twitter platform allowed the creation of a database of emails and phone numbers of millions of users. Twitter said the vulnerability stems from a bug introduced in June 2021. The data included publicly available information: username, display name, biography, location, and profile photo. 6.7 million email addresses were affected.

Around December 2017, there was a leak on the online photo editing site PiZap. It contained 42 million unique records, including emails, names, genders and passwords in the form of SHA-1 hashes.

In mid-2018, social commerce marketplace Poshmark suffered a data breach that exposed the accounts of 36 million users. The data included email addresses, usernames, gender, location, and passwords in the form of bcrypt hashes.

In March 2023, Ukrainian hackers announced the hacking of two subsections of the Rossiyskaya Gazeta: pravo.rg.ru and works.rg.ru. They managed to obtain a user database, which, however, was heavily littered. The data contains 68 thousand records with emails, names, dates of birth and passwords in the form of MD5 hashes.

In May 2017, the GE-Tracker.com swiping tool suffered a data leak that affected 42.2 thousand users. The breach exposed usernames, email addresses, phone numbers, Paypal email addresses, and passwords stored as Bcrypt hashes.

In 2022, there was a data leak from the Russian taxi ordering service Citymobil. The leak affected 3.9 million service clients and 83 thousand drivers. This database contains drivers' telephone numbers. There is also a separate database in which photographs of passports and IDs of service workers were published.

Around February 2017, a mobile restaurant discovery app known as DOJO suffered a data breach that affected 761,000 users. The breach exposed email addresses, full names and passwords as MD5 and Bcrypt hashes. Please note that there are only about 300 thousand valid email addresses, the rest are automatically generated.

Around January 2020, the Spanish learning games and knowledge portal Cerebriti experienced a data breach. The breach exposed full names, email addresses, gender, dates of birth, IP addresses and passwords stored as SHA1 hashes. In total, 126 thousand users were affected.

User data from the Okru.ru message board, published in early 2022. Includes 200 thousand records with emails, logins, names, phone numbers and passwords. Origin unknown.

This collection of files contains voter databases for 27 US states. Much of this data was purchased by Omnipotent for RaidForums in 2018 (most states charge money to download voter data). The databases contain full names, addresses, telephones, emails and parties selected during voting.

In April 2024, a database of clients of the American flower and gift delivery service “Blooms Today” was made publicly available. The leak contains 15 million records with names, phone numbers, emails, addresses and payment card data. A few days before publication, the base was sold for 5 thousand dollars.

In 2023, the site dedicated to board games MonopolyStar suffered from a leak, as a result of which personal data and profile information of 155 thousand users were published, including emails, nicknames, full names, regions of residence, IP addresses and passwords in the form of hashes MD5.

In April 2021, the website selling medical products Lekfarm.ua suffered from a leak. Information about 157 thousand users was exposed, including phone numbers, full names, emails and salted SHA1 hashed passwords.

In June 2023, a database of all Turkish phone numbers stolen from providers was published on a hacker forum. The data contains only a telephone number and an identification number, which plays the role of a passport in Turkey. Data dates back to 2022. A total of 116 million records.

In 2024, the Canadian GiantTiger store suffered a hack. The data published on the hacker forum contains names, emails, addresses and phone numbers of clients. A total of 2.8 million records.

On November 6, 2020, a data leak occurred in the Russian Railways (RZD) company. The Russian Railways bonus program has suffered. The leak contains 1.36 million user emails, their passwords as salted MD5 hashes, and the language used. The database also contained a lot of technical information, such as train schedules and the order of stations. This is the second Russian Railways leak, the first happened in 2019.

In September 2017, Taringa, known as the "Latin American Reddit", suffered a data breach. 28 million records were exposed, including names, email addresses and weak MD5 password hashes.

In April 2018, a Pemiblanc list containing 111 million emails and passwords was discovered on a French server. The data was collected as a result of various leaks from other services.

In January 2022, the database of the DoSeng joke site was published on a hacker forum. The leak contains about half a million records with emails, names, IP addresses, regions of residence and passwords in the form of MD5 hashes.

At the end of 2021, a database containing the data of all Beeline employees became publicly available. Including names, phone numbers, emails, logins and cities of residence. There are about 200 thousand records in total.

Around November 2017, the THCtalk "Marijuana Discussion Forum" suffered a data breach. The hack included usernames, email addresses, IP addresses, dates of birth and passwords stored as vBulletin hashes. In total, 82 thousand users were affected.

Miltor.ru is a Russian bulletin board for the purchase and sale of goods and services. This site was hacked in April 2022. All of its data, including the source code, were made publicly available. 3.7 million users were affected, and the leaked data included emails, phone numbers, names and addresses of users, as well as descriptions of their products.

Uralchem ​​plant employee base. Was received in September 2022, contains 5.5 thousand people. Names, phone numbers, emails, addresses and positions.

Convex is a Russian telecommunications service. At the beginning of 2023, it suffered from a data leak, during which a complete dump of its server (119Gb of data) was published. As a result of the leak, 80 thousand users were affected. Emails, phones, addresses and passwords in the form of MD5 hashes were compromised.

In 2019, a leak occurred on the Chinese social network Weibo. 504 million rows of data were published that included a user ID and associated phone number.

In May 2021, the Russian programming website Realcoding suffered a data leak. The leak exposed usernames, email addresses and passwords stored as MD5 hashes. In total, 113 thousand users were affected.

In 2022, a private combo player containing 400 million emails and passwords was sold online. There were 260 million unique lines. The Kombolist was sold for $650, but now it is available to everyone. To increase the uniqueness of the data, sellers changed the case of some passwords and diluted the data with generated strings. Despite the title, this collection is not related to the March 2022 central bank leak.

Checko is a Russian website for checking companies and legal entities. In 2024, about a million company records were collected from it using parsing. The data contains several emails and telephone numbers, addresses, company names, names of directors and founders, type of activity, number of employees, income and other data.

At the beginning of 2023, a database of a Russian store of electric scooters and other electric vehicles became publicly available. The data contains phone numbers, names, emails, addresses, order amount and comments on it. Only 10 thousand orders. The exact date of the hack is unknown.

In March 2016, the Philippine Elections Commission (COMELEC) website was attacked and defaced, allegedly by Anonymous Philippines. Soon after, data on 55 million Filipino voters was made public and included sensitive information such as gender, marital status, height and weight, and fingerprint biometrics.

Around 2017, Chinese gaming site TGBUS suffered a data breach that affected more than 10 million unique users. The data contains usernames, email addresses, and salted MD5 password hashes.

Around May 2022, hosting provider AlexHost accidentally copied all of its users into an email, allowing anyone who received the email to see other people. The leak included email addresses and full names. In total, information was disclosed to 1.5 thousand clients.

In December 2021, Indian retailer Aditya Birla Fashion and Retail Ltd was hacked and offered a ransom. The ransom demand was rejected and the data was released the following month. They contained 5.4 million customer and employee records, including names, phone numbers, physical addresses, dates of birth, order histories and MD5 hashed passwords.

In April 2023, the video game website Gameplanet suffered a data breach that affected more than 1.7 million of the site's users. The compromised data included more than 1.7 million unique email addresses, dates of birth, names, phone numbers and passwords in the form of Vbulletin hashes.

In January 2019, 5 collections appeared on a popular hacker forum, representing a combination of data from many other leaks. This is the fourth collection, one of the largest. It contained 40 thousand files with a total size of 178 GB. These files contained 5.4 billion lines with emails and passwords, but there were only 1.9 billion unique pairs.

The Carding Mafia forum was designed to steal and trade stolen credit cards. In March 2021, a leak occurred on the forum, which exposed emails, usernames, IP addresses and passwords in the form of salted MD5 hashes. In total, almost 300 thousand participants were affected. The forum was later hacked again in December 2021, just 9 months later, but this leak is not publicly available.

BikeRep is a Danish bicycle repair site. It was hacked in July 2023. The leak contains 35 thousand records and includes emails, phone numbers, addresses, Facebook accounts and passwords in the form of unknown hashes.

xfit is a Russian network of gyms. On May 1, 2022, their website was hacked and the data of 1.5 million clients was exposed to the public. The leak contains emails, phone numbers, names and dates of birth.

Around July 2012, Runescape's private server forum, SilabGarza (aka SG-Forum.info), suffered a data breach. The stolen data included more than 105 thousand emails, as well as usernames, IP addresses and passwords stored as salted MD5 hashes.

This is a Russian site that monitors activity on various Minecraft servers and stores lists of players on them. The date of the hack is unknown. The database contains almost 1.5 million entries, including nickname, server and the number of player logins to it.

In July 2015, a French Pokemon website suffered a data breach that exposed the identities of 657,000 subscribers. The data included email addresses, IP addresses, usernames and passwords as unsalted MD5 hashes.

In September 2016, pay-per-click website ClixSense suffered a data breach that exposed the data of 2.4 million subscribers. The attackers claimed that this was part of a larger data breach involving 6.6 million records. The leaked data included names, physical addresses, emails, IP addresses, gender, balances, dates of birth and passwords. Account balances and passwords are stored in plain text.

This is a Russian network of sports clubs for children. In October 2023, it was leaked, affecting 285 thousand users. The database contains phone numbers, emails and names. There were only 1.5 thousand emails in the file.

At the end of March 2022, Sri Lanka's payment gateway PayHere suffered a data breach. As a result, more than 65 GB of payment data were exposed. The records included more than 15 million unique email addresses. The leak also contained IP addresses, physical addresses, names, phone numbers, purchase history and partially private credit card information.

In May 2018, a leak occurred in the Russian hacker community Lolzteam. The attack resulted in the disclosure of data including names, email addresses and gender. In total, 405 thousand users were affected.

In September 2019, a data leak occurred on the Polish torrent site AgusiQ-Torrents.pl. The incident revealed records of 90,000 participants, which included email addresses and IP addresses, usernames and passwords stored as MD5 hashes.

A combination of leaks from unknown sites in Germany. Appeared on a hacker forum on May 29, 2022. Contains 33 million records.

On September 29, 2020, the Hhide.org hacker forum was hacked. Within a few weeks, the database, along with the source codes, was made publicly available. The leak contains about 57 thousand records, including nicknames, emails, dates of birth and passwords in the form of hashes in an unknown format.

This is a Russian site containing reviews of fraudulent numbers. In April 2024, all data from it was collected using parsing. The resulting database contains 57 thousand phones with reviews about them and the nicknames of the authors of these reviews.

In December 2015, the popular Minecraft Resolver website (mcresolver.pw) suffered a data breach that exposed over 13 million usernames and IP addresses.

Around August 2021, the mental health app Lyf suffered a data breach. The breach included email addresses, names, countries, dates of birth and passwords stored as hashes of an unknown format. In total, 228 thousand users were affected.

Eprice.com.tw is a Taiwanese e-commerce website. In January 2021, it was hacked and 460 thousand records were made public. The data contained emails, phone numbers, names, residential addresses, dates of birth, IP, security questions and answers to them in clear form, as well as passwords in plain text.

In mid-2024, hackers broke into the dental online store El-dent.ru. The resulting data contained almost 200 thousand rows, including names, phone numbers and addresses.

Mira1.ru is a Russian museum center on Peace Square in Krasnoyarsk. In early 2023, their website suffered a leak. Because of this, 500 thousand users were compromised. The database included emails, telephone numbers, names and dates of registration in UNIX format.

GSM-hodgepodge is a very common base for breaking through data. It was created in 2022 from various sources. Contains names, phone numbers, dates of birth and mail. There are 11 million records in total.

In July 2023, the First Furniture store suffered from a data leak. The database published later contains 8,600 records with information about orders. Data includes names, phone numbers, emails, addresses and purchase information.

This is a New Zealand forum for competitions. It was hacked in November 2019. The published leak contains 160 thousand records with emails, nicknames, IP addresses and passwords in the form of MD5 hashes with salt.

In 2014, the ThisHabbo forum (a fan site of the Finnish social network Habbo.com) appeared on the list of compromised sites. While the actual date of the hack is unclear, the stolen data includes usernames, email addresses, IP addresses and password hashes. The published file contained only 27 thousand records. Another 584 thousand records were discovered in October 2016, but they are still not publicly available.

StrikePlanet is a Russian online store with airsoft products. It was hacked in January 2021. More than 40 thousand records with customer data were made publicly available. The database contains emails, phone numbers, names, dates of birth and passwords in the form of MD5 hashes with salt.

In September 2014, a data leak occurred on the RuneScape DeviousPk server (now defunct), affecting 5.7 thousand participants. The breach included usernames, email addresses, IP addresses and passwords stored as vBulletin hashes.

In December 2015, the Aternos service, which allows you to create and run free Minecraft servers, suffered a data leak that affected 1.4 million subscribers. The data included usernames, email addresses, IP addresses and also hashed and salted passwords. The non-standard formula MD5(SHA1(SALT)MD5(PLAIN)) was used.

This Minecraft server was hacked at the end of 2016. 240 thousand records were made publicly available, including nicknames, IP addresses and passwords in the form of AuthMe hashes.

Stickam was a video streaming website launched in 2005. On February 1, 2013, Stikam announced its closure a month later. It is unknown when it was hacked, but it is believed to have happened in 2012. The leak contains 530 thousand records and includes usernames, emails and passwords.

In April 2020, Brazilian shopping site HomeRefill suffered a data breach that affected 194 thousand users. The attack exposed email addresses, full names, phone numbers, dates of birth and passwords in the form of SHA512 hashes. The hack was caused by an incorrectly configured aws s3 bucket.

In August 2023, an incident occurred with the Mywed.com portal, a platform for wedding photographers. The data of 13 thousand users was made publicly available, including their full names, phone numbers, nicknames and cities of residence.

In August 2021, the Brazilian training platform CCAA suffered a data breach that affected 979 thousand participants. The attack exposed email addresses and passwords stored as Wordpress hashes.

In October 2020, New York-based dietary supplement company Gainful suffered a data breach that affected 102,000 users and 305,000 orders. The breach exposed email addresses, order numbers, payment methods, and the last 4 digits of credit/debit cards (if used). Gainful never notified affected users of the threat.

In April 2024, the Indian digital learning platform Quest App was hacked and the data was then published on a hacker forum. The leak includes about 700 thousand users, contains 522 thousand unique email addresses, dates of birth, gender, marital status, names, phone numbers and passwords, saved as MD5 and bcrypt hashes.

In April 2021, Indian brokerage firm Upstox suffered a data breach. The incident exposed extensive personal information about more than 100,000 customers, including names, gender, dates of birth, physical addresses, banking information and passwords in the form of bcrypt hashes. Extensive know-your-customer information was also revealed, including scans of bank statements, checks and identity documents with Aadhaar numbers.

In January 2016, a large number of vBulletin forums were compromised by an entity known as CrimeAgency. In total, data from 140 forums were extracted and then disseminated. The data included usernames, email addresses, and passwords, most commonly hashed using salted MD5.

In August 2024, the Russian pharmacy chain AptekiPlus was hacked. The published data contains telephone numbers, mails, names and regions of residence in the form of their numbers. A total of 4.5 million records.

In January 2022, the review publishing site Otzyvy.pro suffered a data leak. Records of 338 thousand users were leaked into the network, including emails, full names, phone numbers, IP addresses, nicknames and passwords in the form of an MD5 hash.

Around January 2016, the UK Android MoDaCo community suffered a data breach. As a result, the identities of 880,000 subscribers were revealed. The data included email addresses, IP addresses, usernames and passwords as salted MD5 hashes.

KudaNaMore is a Russian bulletin board for renting houses on the seashore. In October 2024, data from all advertisements on this site was collected using scraping. In total there were about 20 thousand records with telephone numbers, names, a small number of emails and text descriptions of rental properties.

In August 2022, the Russian Internet provider DomConect was hacked. The leak included technical support data, customer history and call data. The total number of telephones exceeds 2 million, but there is almost no data on customer names.

In January 2019, event management platform Peatix suffered a data breach. As a result of the incident, 4.2 million email addresses, names and salted password hashes were exposed.

In July 2023, a leak occurred on the Russian photo sharing site ClubFoto. The database contains 615 thousand lines and includes user names, nicknames, emails, dates of birth, IP and passwords.

Sapato is a Russian spare parts store. There is a leak on the Internet from this site dating back to 2014 and containing more than a million lines with names, emails and addresses of clients.

In mid-2018, the online photography community 500px suffered a data breach. The incident exposed nearly 15 million unique email addresses. The data also included usernames, gender, dates of birth, and MD5 or bcrypt password hash.

In 2019, a database with data on Russian citizens was published. It contains 25 million records. The file contains names, phone numbers, addresses, passport details, Snils and INN numbers and dates of birth. The origin of the base is unknown.

A website that provides free photos for commercial and non-commercial use, LifeOfPix.com, has suffered a data breach. It affected about 175 thousand records, including emails, passwords and nicknames.

In June 2020, 14 previously unknown data breaches went on sale. Among them was the Brazilian delivery service James. The breach occurred in March 2020 and exposed 1.5 million unique email addresses, as well as customer locations and passwords in the form of bcrypt hashes.

In 2022, a data leak occurred at the Russian software developer Naumen. Data includes emails and usernames.

This is an Iranian forum dedicated to music. It was hacked in November 2019. The published leak contains 260 thousand records with emails, nicknames, IP addresses and passwords in the form of MD5 hashes with salt.

On August 4, 2023, the NLB hacker group published the Litres bookstore database. The leak contains 3 million records, but hackers claim that this is only part of the leak and there are 97 million users in the full version. The data contains names, emails and passwords as SHA1 hashes. In most lines, names and emails were not filled in.

In June 2024, text files containing a dump of several tables from the database of the website shop.mgnl.ru, an online store of the Magnolia supermarket chain, were made publicly available. The files contain names, emails, addresses, phone numbers, hashed passwords and order information. In total there are about 250 thousand unique users.

One of the biggest leaks from the Federal Bailiff Service. Dating back to 2020, it contains approximately 100 million records. Also this year there was a more modest leak - 17 million lines. The data contains names, addresses, INN, amount of debt, information about collectors and other information.

Around 2019, the multiplayer gaming website OMGPop (formerly known as "i'minlikewithyou") suffered a data breach affecting approximately 7 million users. The data dates back to 2013, but was leaked in 2019. The attack exposed email addresses and passwords in plaintext.

In 2011, Sony suffered from multiple cybersecurity breaches. Using SQL injection on the website sonypictures.com, 37 thousand accounts on various systems were hacked. Data included dates of birth, email addresses, gender, names, passwords, phone numbers, physical addresses, and usernames.

In 2019, a leak occurred from the public registry of the city of Hanoi in Vietnam. The database contains about a million records with names, dates of birth, telephone numbers and emails of city residents.

In November 2018, the Russian online store Ozon was hacked. 450,000 accounts were affected, which became known only after 7 months. It turned out that the company stored passwords in clear text and only after this leak began hashing them. Only passwords and emails were made publicly available.

Around February 2015, the Xbox-Scene forum was hacked, exposing over 432,000 accounts. The forum included emails, names, IP addresses and passwords in the form of salted hashes.

In January 2020, motorcycle maker Royal Enfield left its database publicly accessible, resulting in the inadvertent release of data from over 400,000 customers. The leaks included email addresses, physical addresses, names, motorcycle information, social media profiles, encrypted passwords and other personal information.

Around July 2015, a Sony Playstation hacking and modding forum known as PS3Hax was hacked and over 447 thousand accounts were exposed. On the vBulletin forum, IP addresses and passwords were stored as salted hashes using a weak implementation that allowed many of them to be quickly cracked.

In October 2019, information appeared about a data leak of 8 million clients of the Russian mobile operator Beeline. The data contains information for 2017. The leak includes the full names, phone numbers, emails, addresses and connected services of people who installed wired Internet.

In February 2024, a leak occurred from a Russian microfinance organization, claiming to be OneClickMoney. The hacker was able to obtain an SQL dump of a site containing almost 10 million users. The data includes names, dates of birth, passport data, work data and up to 6 different phone numbers of the client and his contact persons, as well as other information.

On 02/23/2023, a leak occurred on the Arabic website Btech.com, which sells electronics. The data contains 200 thousand records with names, phone numbers and emails of users.

In July 2012, Yahoo! their online publishing service "Voices" was compromised via an SQL injection attack. The hack exposed nearly half a million usernames and passwords stored in clear text. The breach found that 59% of people who also had accounts in the Sony leak reused their passwords on both services. In 2012, such analytics were still relatively new.

Around October 2016, the Spanish pokemon website "Pokemon Negro" suffered a data breach. As a result of the attack, 830,000 accounts were exposed. Data includes email addresses, IP addresses and unencrypted passwords. Pokemon Negro did not respond to the message about the hack.

In May 2015, Polish 3D modeling website Evermotion was leaked, revealing 435,000 unique entries. The data contained addresses, emails, names, dates of birth and salted MD5 passwords.

In February 2021, it became known about a leak from PrivatBank, the largest bank in Ukraine. A database containing more than 40 million records was put up for sale. It contained names, dates of birth, tax identification number, telephone numbers and passport details. Later the database was published in the public domain.

Sometime in 2019 or 2020, Runescape Private Server Atlas suffered a data breach that affected 12.9 thousand users. The breach included usernames, email addresses, IP addresses and passwords stored as bcrypt hashes. The site no longer exists and the domain belongs to someone else.

In 2017, there was a data leak in the online game Bin Weevils. The leak included usernames, email addresses, IP addresses and passwords as PeopleSoft hashes (UIDs). In total, 6.9 million users were affected. This game previously suffered from a leak in 2014.

The server for the Minecraft game SimpleMinecraft was hacked. The date of the leak is unknown, but as a result, the accounts of 500 thousand players were compromised. The data includes nicknames, emails and passwords in the form of double MD5 hashes.

On April 10, 2024, the Russian platform for discussing and rating websites Sites.Reviews suffered a data leak. There were more than 340 thousand records online containing emails, nicknames, full names, IP addresses and passwords in the form of MD5 hashes.

In early 2013, Tumblr suffered a leak that exposed over 65 million accounts. The data was later put up for sale and included emails and passwords as SHA1 hashes with a salt.

A set of several dozen databases published in one of the telegram channels one at a time throughout 2022. Contains 62 million mails. Approximately 5 million of them are accompanied by simple text passwords.

In 2019, about half a million user entries were published, obtained from the website Zunal.com, which provides online erudition quests. The data contains emails, names, dates of birth and passwords in plain text.

In 2012, the website of the now defunct mobile phone charging company Turecarga in Spain was hacked. The leak, 485 thousand lines in size, contains emails, names, dates of birth and residential addresses of users.

On May 16, 2023, it became known about a data leak from the Russian pharmacy VolgoFarm.ru. The published database contained 75 thousand records about clients, but there is also a private database with 220 thousand records. The leak included phone numbers, emails, names, order dates and payment amounts.

Around May 2021, international artificial intelligence and analytics service Fractal suffered a data breach. The hack exposed email addresses, job titles, full names and phone numbers. In total, 12.2 million users were affected.

In July 2016, Muslim dating site Shadi.com suffered a data breach that exposed the email addresses of over 2 million members. The hack also exposed passwords stored as MD5 hashes, along with their text variants, and user registration dates.

In July 2020, online fundraising platform Omaze was hacked. As a result, 2.7 million users suffered from their personal information being leaked. Data included usernames, email addresses, passwords, social media links, geographic locations, first names, last names, and gender of users.

In February 2023, the Russian online shoe store 2krossovka was hacked. The leak contains about 30 thousand records with phone numbers, IP addresses, emails, names and other data about clients.

In July 2018, the online multiplayer game Stronghold Kingdoms suffered a data leak. The incident affected almost 5.2 million accounts. This resulted in the disclosure of email addresses, usernames and passwords in the form of salted SHA-1 hashes.

NumBuster is an application for determining the identity of the person calling. This database was obtained by scraping this application in September 2020. It contains half a million phone numbers and the names with which users of the application marked them in the contact book.

Leomax is a Russian clothing and home goods store. It was hacked in September 2021. The leak includes names, addresses, phone numbers, order dates and amounts. A total of 112 thousand records.

In 2022, the Instagram user base, collected through parsing, began to spread in Telegram channels. The date of data collection is unknown, but the database contains 17 million records, including names, emails, phone numbers, nicknames and addresses.

In October 2021, an open database was discovered, which was later linked to ActMobile, an American VPN service. Most of the data was auto-generated data, but the database contained 1.6 million unique email addresses, as well as IP addresses and password hashes. All this data was subsequently leaked to a hacker forum.

In 2022, there was a data leak from the Russian taxi ordering service Citymobil. The leak affected 3.9 million service clients. The leak contains customer phone numbers, the number of orders and trips, and the date of the last order.

Around August 2018, the Russian anime site AniLibria suffered a data leak that affected 149 thousand users. The attack exposed usernames, email addresses and passwords stored as statically salted MD5 hashes.

Himera is a well-known bot for punching information. In 2024, a small part of its database containing 120 thousand users became publicly available. Data included names, telephone numbers, dates of birth and addresses. At the same time, the full version of the database, 91 million rows in size, began to be sold. Later, this full version also became publicly available and turned out to be an absolute fake, so the data from this fragment of the database should not be taken seriously either.

One of the largest banks in Kazakhstan recorded a data leak in 2023. As a result, more than 30 thousand records appeared on the Internet, including full names, addresses, dates of birth and telephone numbers.

This is a Russian cosmetics website. On August 13, 2024, a database leak occurred on it. The database contains emails, phone numbers, names, addresses, passwords in the form of MD5 hashes and other information. A total of 325 thousand records.

This database contains the names of all convicted criminals in Russia, as well as their dates of birth, regions and articles of the sentence. Data refer to 2020. Most likely, the database was obtained by parsing government websites.

In May 2022, Australian retailer Amart Furniture reported that their warranty claims database was the target of a cyber attack. More than 100,000 records containing email address, physical address, names, phone numbers and passwords in the form of bcrypt hashes were exposed and published online by the attacker.

In 2015, due to a vulnerability, attackers were able to intercept about 270 thousand SMS messages sent from Russian phones. The resulting database was later published; it contains phone numbers, dates of sending messages and their contents.

In April 2018, the VbenterPriseTranslator forum, dedicated to machine and manual translation, suffered from a hack. An SQL dump was published containing 1.2 million records, including nicknames, emails, passwords in the form of MD5 hashes with salt, and other information about users.

In April 2024, it became known that the servers of the Moscow Information Technology Department were hacked. According to the hackers, they managed to steal 40 terabytes of information. Many services were affected, the databases of which subsequently periodically appeared in the public domain. This also affected the Unified Medical Information and Analytical System (UMIAS), the database of which was published at the end of August 2024. The data contains 19 million unique records with names, dates of birth, telephone numbers, mails, document numbers, addresses and other numerous information.

In November 2014, a data leak occurred on the Bot of Legends forum. The IP.Board forum contained 238 thousand accounts, including usernames, emails, IP addresses and passwords, stored as salted MD5 hashes.

In March 2024, the French website Sport2000 suffered from a hack. More than 4 million records have been published, including names, phone numbers, emails, addresses, dates of birth and other information.

In 2019, a leak occurred on the Russian gaming site Ongab.ru. 92 thousand users were affected. Emails, names, IDs of Facebook and Contact accounts, as well as passwords in the form of MD5 hashes were made publicly available.

In November 2021, online trading platform Robinhood suffered a data breach. Hackers used social engineering on a customer service representative. The incident exposed more than 5 million email addresses and 2 million customer names.

Allegedly in 2017, Russia Mobile created a dataset of Russian users, mainly from Moscow. Data includes emails, phone numbers, full names and dates of birth. Total 722 thousand.

On June 28, 2023, the Planzala.ru website, which provides ticket purchasing services, became a victim of a data leak. The compromised database contains more than 950 thousand entries, including full names, phone numbers, emails, IP addresses, as well as passwords in the form of a bcrypt hash.

At the end of spring 2023, it became known that data from the CITILAB clinical diagnostic laboratories had been leaked. Many documents and analysis results were published, as well as a complete user database dated 09/11/2023. It contains 350 thousand records with names, phone numbers, emails, addresses and passwords in the form of MD5 hashes.

In January 2021, Indian wedding planning platform WedMeGood suffered a data breach that compromised the data of 1.3 million customers. The hack exposed 41.5GB of data, including email addresses, physical addresses, names, genders, phone numbers and password hashes.

EmailMaker is an online email designer. At the end of 2021, it suffered from a leak that affected 4.4 million users. The data contains emails, names and other information.

In February 2011, the hacker forum Rootkit.com was hacked. As a result, about 80 thousand records containing emails, nicknames, full names, IP addresses and passwords in the form of MD5 hashes were leaked into the network.

In October 2023, a Russian website selling sports nutrition, FarmaCent.ru, was hacked. As a result, data on 23 thousand orders was exposed, including emails, full names, phone numbers, addresses and IP addresses.

In July 2021, the Minecraft server SandPex suffered from a leak that affected 340 thousand players. The data included nicknames, IP addresses and passwords in the form of AuthMe hashes. The server was previously hacked at the beginning of 2020.

On February 7, 2023, a hacker under the pseudonym DonJuji made publicly available all the databases he had ever hacked. He said that this was due to the fact that he was changing his field of activity. In total, he published more than 2,000 databases with a total size of 105 gigabytes, mainly in the form of SQL dumps. The data contained more than 150 million emails and related information.

In August 2010, the forum of the Russian hacker community Antichat.ru suffered an information leak. The incident affected more than 40 thousand participants. The data included nicknames, emails and passwords in the form of MD5 hashes.

The Pechora Rescue Committee is a non-governmental organization working in the Pechora River basin and dealing with environmental issues. This site suffered a hack in February 2023. The data of 230 thousand users was published, which includes emails, names, IP addresses and hashed passwords.

In 2016-2017, a leak occurred in the company SuperJob, which provides a search for high-paying vacancies. However, until 2020 nothing was known about the leak. When it was published, it contained 5 million users and information about their emails, phone numbers, names, cities of residence and dates of birth.

Around October 2020, the French car rental service UCAR suffered a data leak that affected 134 thousand users. The attack exposed email addresses, home phone numbers, mobile phone numbers, physical addresses and full names.

In January 2023, the American portal of children's summer programming training camps “iD Tech” was hacked. The leak contains about a million records with names, nicknames, dates of birth and passwords in plain text.

In May 2022, the Russian delivery service DeliveryClub reported a leak. Later, hackers published two files containing customer order data - names, phone numbers, emails, addresses and order contents. The total size of the leak is rumored to be 250 million records, but only 7.5 million orders are publicly available.

In June 2020, the Russian minecraft server StreamCraft suffered from a data leak. The published database included nicknames, emails, IP addresses and passwords in the form of bcrypt hashes. In total, 1.8 million players were affected.

The database of the OpenRaid website, which allowed World of Warcraft gamers to coordinate group tasks and communicate, became publicly available in 2015. The file contained emails, nicknames and password hashes of more than 344 thousand users.

Around January 2021, a porn and hentai site dedicated to the game “Fortnite” experienced a data leak that affected 76.4 thousand users. The breach included usernames, email addresses and passwords in MD5 hashes.

A site dedicated to beer produced in Siberia. It suffered a data leak containing 56 thousand users. Full names, phone numbers and dates of birth were compromised.

In September 2019, a data leak occurred on the CapitalGames gaming forum, which affected 645 thousand customers. The breach included email addresses, usernames, IP addresses and passwords stored as MD5 hashes. The site was hacked using the ForumRunner vulnerability. In total, 645 thousand users were affected.

In July 2021, the nomer.io service and all its mirrors suffered from a hack. This service provided a search for personal data by phone number. The leak contains 4.5 million emails with passwords without hashing. There is also data on status and total spending. The database was obtained as follows: the source code of the site was found, which contained the administrator’s email, the password for this email was found in other databases and was suitable.

In July 2023, it became known that pro-Ukrainian hackers had hacked the Russian tour operator Intourist. A file containing 5.5 million lines was published. The leak contains names, phone numbers, addresses, dates of birth, passport details, citizenship and date of tourist trip. The data was heavily littered.

In February 2024, it became known that hackers gained access to information from the appointment form on the website of the SOVA medical center. The published data contains names, telephone numbers, emails, cities of residence and texts of comments. A total of 126 thousand records.

In June 2020, online fragrance service Scentbird suffered a data breach. Because of it, the personal information of more than 58 million customers was disclosed. Personal information including names, email addresses, gender, dates of birth, passwords as bcrypt hashes and password strength indicators.

In April 2020, Nepalese internet service provider Vianet suffered a data breach. The attack on the Internet provider led to the disclosure of 177 thousand customer records, including 94 thousand unique email addresses. Names, phone numbers and physical addresses were also revealed.

One of the largest private Indian banks suffered a data breach in 2023. 3.2 million records were compromised, including emails, addresses, names and phone numbers of clients.

In September 2014, there was a data leak in the online game Bin Weevils. While it was initially stated that only usernames and passwords were exposed, it was later revealed that a wider range of personal attributes were affected. The data included nearly 1.3 million unique email addresses, as well as gender, age and text passwords.

In February 2019, EstanteVirtual, the largest book portal in Brazil, suffered a data leak. The attack exposed full names, usernames, email addresses, physical addresses and passwords in the form of SHA-1 hashes. A total of 5.4 million users were affected. The website was hacked by "Gnosticplayers".

In 2022, the Russian courier service Grastin suffered from a data leak. The file, published later, contained 1.5 million records, including names, phone numbers, addresses, mail and other information.

LinkedIn profile database for business prospecting and audience research. Records are focused on professional profile data such as names, job titles, companies, locations and profile URLs.

PeopleData profile database for lead enrichment and contact research. Records are focused on identity and profile attributes such as names, roles, companies, locations and available contact fields.

Facebook and Instagram profile database for audience discovery and social media research. Records are focused on social profile attributes such as names, usernames, profile URLs and public platform fields.