Skip to content

Myspace

Disclosed May 31, 201610 years ago359,420,698 affectedConfirmed

Official notice

Stolen logins from pre-2013 Myspace accounts offered on hacker forum

Myspace said stolen login data for accounts created before June 11, 2013 on its old platform, including emails, usernames and passwords, was being offered in an online hacker forum; it invalidated those passwords. Have I Been Pwned loaded almost 360 million accounts.

What is known

People affected359,420,698 (as reported by the organization)
DisclosedMay 31, 2016
HappenedJul 1, 2008
AttackHacking
Data exposedEmails, Passwords, Names
SectorTech · US
StatusConfirmed
Check your emailHave I Been Pwned

Sources

Source
California Attorney General breach notice: Myspaceoag.ca.gov · Official notice
Have I Been Pwned: MySpacehaveibeenpwned.com · Aggregator
Myspace Blog: update on security incidentweb.archive.org · The organization

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataMay 31, 2016359,420,698
ResearchtotalMay 31, 2016359,420,698
California AGresidents of CAJun 3, 2016
History of this record
  • 2026-09-25 · attack: unknown to hacking · seed source
  • 2026-09-25 · data_types: ["emails","passwords"] to ["emails","passwords","names"] · seed source
  • 2026-09-25 · records_basis: hibp to organization · seed source
  • 2026-09-25 · summary: In approximately 2008, MySpace suffered a data breach that exposed almost 360 million accounts . In May 2016 the data was offered up for sale on the "Real Deal" dark market website and included email addresses, usernames and SHA1 hashes of to Myspace said stolen login data for accounts created before June 11, 2013 on its old platform, including emails, usernames and passwords, was being offered in an online hacker forum; it invalidated those passwords. Have I Been Pwned loaded a · seed source
  • 2026-09-25 · title: empty to Stolen logins from pre-2013 Myspace accounts offered on hacker forum · seed source
  • 2026-09-25 · hibp: empty to MySpace · backfill source
  • 2026-09-25 · sector: other to tech · backfill source
  • 2026-09-25 · data_types: [] to ["emails","passwords"] · backfill source
  • 2026-09-25 · records_basis: empty to hibp · backfill source
  • 2026-09-25 · records: empty to 359420698 · backfill source
  • 2026-09-25 · disclosed: 2016-06-03 to 2016-05-31 · backfill source
  • 2026-09-25 · occurred: empty to 2008-07-01 · backfill source
  • 2026-09-25 · summary: empty to In approximately 2008, MySpace suffered a data breach that exposed almost 360 million accounts . In May 2016 the data was offered up for sale on the "Real Deal" dark market website and included email addresses, usernames and SHA1 hashes of · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Myspace

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.