Every public data breach

44 disclosed this week · 26,355 on record

i-Dressup

Disclosed Sep 26, 20162,191,565 accountsUnverified

In June 2016, the teen social site known as i-Dressup was hacked and over 2 million user accounts were exposed. At the time the hack was reported, the i-Dressup operators were not contactable and the underlying SQL injection flaw remained open, allegedly exposing a total of 5.5 million accounts. The breach included email addresses and passwords stored in plain text.

What is known

People affected2,191,565 (accounts in the leaked data, per Have I Been Pwned)
DisclosedSep 26, 2016
HappenedJul 15, 2016
AttackHacking
Data exposedEmailsPasswords
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about i-Dressup