Imgur

Disclosed Nov 24, 20171,749,806 accountsConfirmed

In September 2013, the online image sharing community imgur suffered a data breach . A selection of the data containing 1.7 million email addresses and passwords surfaced more than 4 years later in November 2017. Although imgur stored passwords as SHA-256 hashes, the data in the breach contained plain text passwords suggesting that many of the original hashes had been cracked. imgur advises that they rolled over to bcrypt hashes in 2016.

What is known

People affected	1,749,806 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Nov 24, 2017
Happened	Jan 1, 2014
Attack	Not stated
Data exposed	EmailsPasswords
Sector	Tech · US
Status	Confirmed
Check your email	Have I Been Pwned

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Imgur

Aggregatorhaveibeenpwned.com

Have I Been Pwned: imgur

Notices filed

Residents of CANov 24, 2017

California AGCount not stated

Accounts in the dataNov 25, 2017

Have I Been Pwned1,749,806 people

History of this record

hibp2026-09-25

empty to imgurby backfillSource

sector2026-09-25

other to techby backfillSource

data_types2026-09-25

[] to ["emails","passwords"]by backfillSource

records_basis2026-09-25

empty to hibpby backfillSource

records2026-09-25

empty to 1749806by backfillSource

summary2026-09-25

empty to In September 2013, the online image sharing community imgur suffered a data breach . A selection of the data containing 1.7 million email addresses and passwords surfaced more than 4 years later in November 2017. Although imgur stored passwby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Imgur