Imgur
Disclosed Nov 24, 20178 years ago1,749,806 accountsConfirmed
In September 2013, the online image sharing community imgur suffered a data breach . A selection of the data containing 1.7 million email addresses and passwords surfaced more than 4 years later in November 2017. Although imgur stored passwords as SHA-256 hashes, the data in the breach contained plain text passwords suggesting that many of the original hashes had been cracked. imgur advises that they rolled over to bcrypt hashes in 2016.
What is known
| People affected | 1,749,806 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Nov 24, 2017 |
| Happened | Jan 1, 2014 |
| Attack | Not stated |
| Data exposed | Emails, Passwords |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Imguroag.ca.gov · Official notice | Official notice |
| Have I Been Pwned: imgurhaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Nov 24, 2017 | |
| Have I Been Pwnedaccounts in the data | Nov 25, 2017 | 1,749,806 |
History of this record
- 2026-09-25 · hibp: empty to imgur · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · data_types: [] to ["emails","passwords"] · backfill source
- 2026-09-25 · records_basis: empty to hibp · backfill source
- 2026-09-25 · records: empty to 1749806 · backfill source
- 2026-09-25 · summary: empty to In September 2013, the online image sharing community imgur suffered a data breach . A selection of the data containing 1.7 million email addresses and passwords surfaced more than 4 years later in November 2017. Although imgur stored passw · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.