Skip to content

Cutout.Pro

Disclosed Feb 28, 20242 years ago19,972,829 accountsUnverified

AI photo editing platform breach leaked 20M records

In February 2024 data from AI visual design platform Cutout.Pro, including emails, IP addresses, names and salted MD5 password hashes, was spread on a hacking forum and Telegram. Have I Been Pwned counted about 20 million records.

What is known

People affected19,972,829 (accounts in the leaked data, per Have I Been Pwned)
DisclosedFeb 28, 2024
HappenedFeb 26, 2024
AttackHacking
Data exposedEmails, IP addresses, Names, Passwords
SectorAI
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Cutout.Prohaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataFeb 28, 202419,972,829
ResearchtotalFeb 28, 2024

Other breaches at Cutout.Pro

BreachAffected
Open Elasticsearch instance leaked 9GB of Cutout.pro AI image editor user logsFeb 16, 20233 years agoExposed dataUnverifiedUnknown
History of this record
  • 2026-09-25 · source_type: aggregator to press · seed source
  • 2026-09-25 · sector: tech to ai · seed source
  • 2026-09-25 · summary: In February 2024, the AI-powered visual design platform Cutout.Pro suffered a data breach that exposed 20M records . The data included email and IP addresses, names and salted MD5 password hashes which were subsequently broadly distributed to In February 2024 data from AI visual design platform Cutout.Pro, including emails, IP addresses, names and salted MD5 password hashes, was spread on a hacking forum and Telegram. Have I Been Pwned counted about 20 million records. · seed source
  • 2026-09-25 · title: empty to AI photo editing platform breach leaked 20M records · seed source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Cutout.Pro

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.