Every public data breach

44 disclosed this week · 26,355 on record

DaFont

Disclosed May 18, 2017637,340 accountsUnverified

In May 2017, font sharing site DaFont suffered a data breach resulting in the exposure of 637k records. Allegedly due to a SQL injection vulnerability exploited by multiple parties, the exposed data included usernames, email addresses and passwords stored as MD5 without a salt.

What is known

People affected637,340 (accounts in the leaked data, per Have I Been Pwned)
DisclosedMay 18, 2017
HappenedMay 16, 2017
AttackNot stated
Data exposedEmailsPasswords
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about DaFont