Every public data breach

44 disclosed this week · 26,355 on record

Club Penguin Rewritten

Disclosed Jul 30, 20194,007,909 accountsUnverified

In July 2019, the children's gaming site Club Penguin Rewritten (CPRewritten) suffered a data breach (note: CPRewritten is an independent recreation of Disney's Club Penguin game). In addition to an earlier data breach that impacted 1.7 million accounts, the subsequent breach exposed 4 million unique email addresses alongside IP addresses, usernames and passwords stored as bcrypt hashes.

What is known

People affected4,007,909 (accounts in the leaked data, per Have I Been Pwned)
DisclosedJul 30, 2019
HappenedJul 27, 2019
AttackNot stated
Data exposedEmailsIP addressesPasswords
SectorNonprofit
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

Other breaches at Club Penguin Rewritten

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Club Penguin Rewritten