Every public data breach

47 disclosed this week · 26,367 on record

Drupal.org

Disclosed May 29, 20131,000,000 affectedUnverified

Hack of Drupal.org forces password reset for nearly 1 million accounts

Attackers exploited a vulnerability in third party software on Drupal.org and accessed user data including password data, forcing resets for almost one million accounts.

What is known

People affected1,000,000 (as reported by the organization)
DisclosedMay 29, 2013
AttackHacking
Data exposedCredentials and tokensPasswords
SectorTech · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Drupal.org