Club Penguin Rewritten
Disclosed Jul 30, 20194,007,909 accountsUnverified
In July 2019, the children's gaming site Club Penguin Rewritten (CPRewritten) suffered a data breach (note: CPRewritten is an independent recreation of Disney's Club Penguin game). In addition to an earlier data breach that impacted 1.7 million accounts, the subsequent breach exposed 4 million unique email addresses alongside IP addresses, usernames and passwords stored as bcrypt hashes.
What is known
| People affected | 4,007,909 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jul 30, 2019 |
| Happened | Jul 27, 2019 |
| Attack | Not stated |
| Data exposed | EmailsIP addressesPasswords |
| Sector | Nonprofit |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
Other breaches at Club Penguin Rewritten
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.