Breachesby GlyphClub Penguin Rewritten
Disclosed Apr 23, 20191,688,176 accountsUnverified
In January 2018, the children's gaming site Club Penguin Rewritten (CPRewritten) suffered a data breach (note: CPRewritten is an independent recreation of Disney's Club Penguin game). The incident exposed almost 1.7 million unique email addresses alongside IP addresses, usernames and passwords stored as bcrypt hashes. When contacted, CPRewritten advised they were aware of the breach and had "contacted affected users".
What is known
| People affected | 1,688,176 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Apr 23, 2019 |
| Happened | Jan 21, 2018 |
| Attack | Not stated |
| Data exposed | EmailsIP addressesPasswords |
| Sector | Nonprofit |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
Other breaches at Club Penguin Rewritten
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.