Skip to content
Breaches.

Club Penguin Rewritten

Disclosed Jul 30, 20197 years ago4,007,909 accountsUnverified

In July 2019, the children's gaming site Club Penguin Rewritten (CPRewritten) suffered a data breach (note: CPRewritten is an independent recreation of Disney's Club Penguin game). In addition to an earlier data breach that impacted 1.7 million accounts, the subsequent breach exposed 4 million unique email addresses alongside IP addresses, usernames and passwords stored as bcrypt hashes.

What is known

People affected4,007,909 (accounts in the leaked data, per Have I Been Pwned)
DisclosedJul 30, 2019
HappenedJul 27, 2019
AttackNot stated
Data exposedEmails, IP addresses, Passwords
SectorNonprofit
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Club Penguin Rewritten (July 2019)haveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataJul 30, 20194,007,909

Other breaches at Club Penguin Rewritten

BreachAffected
Disclosed Apr 23, 2019Apr 23, 20197 years agoUnverified1.7Macct
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Club Penguin Rewritten

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.