Skip to content
Breaches.

Club Penguin Rewritten

Disclosed Apr 23, 20197 years ago1,688,176 accountsUnverified

In January 2018, the children's gaming site Club Penguin Rewritten (CPRewritten) suffered a data breach (note: CPRewritten is an independent recreation of Disney's Club Penguin game). The incident exposed almost 1.7 million unique email addresses alongside IP addresses, usernames and passwords stored as bcrypt hashes. When contacted, CPRewritten advised they were aware of the breach and had "contacted affected users".

What is known

People affected1,688,176 (accounts in the leaked data, per Have I Been Pwned)
DisclosedApr 23, 2019
HappenedJan 21, 2018
AttackNot stated
Data exposedEmails, IP addresses, Passwords
SectorNonprofit
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Club Penguin Rewritten (January 2018)haveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataApr 23, 20191,688,176

Other breaches at Club Penguin Rewritten

BreachAffected
Disclosed Jul 30, 2019Jul 30, 20197 years agoUnverified4Macct
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Club Penguin Rewritten

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.