Skip to content

Fanlore

Disclosed Aug 19, 20265 weeks ago144,520 accountsConfirmed

Official notice

In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates . The breach resulted in the exposure of 145k unique email addresses along with usernames and passwords stored as either MD5 or PBKDF2 hashes. OTW self-submitted the exposed data to HIBP.

What is known

People affected144,520 (accounts in the leaked data, per Have I Been Pwned)
DisclosedAug 19, 2026
HappenedAug 6, 2026
AttackNot stated
Data exposedEmails, Names, Passwords
SectorTech
StatusConfirmed
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Fanlorehaveibeenpwned.com · Aggregator
Fanlore disclosuretransformativeworks.org · The organization

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataAug 19144,520
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned), confirmed by Company page. Record counts are as reported. Not legal advice.

Everything about Fanlore

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.