Every public data breach

44 disclosed this week · 26,355 on record

Neopets

Disclosed Jul 7, 201626,892,897 accountsUnverified

In May 2016, a set of breached data originating from the virtual pet website "Neopets" was found being traded online . Allegedly hacked "several years earlier", the data contains sensitive personal information including birthdates, genders and names as well as almost 27 million unique email addresses. Passwords were stored in plain text and IP addresses were also present in the breach.

What is known

People affected26,892,897 (accounts in the leaked data, per Have I Been Pwned)
DisclosedJul 7, 2016
HappenedMay 5, 2013
AttackHacking
Data exposedDates of birthEmailsLocationIP addressesNamesPasswords
SectorTech · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

Other breaches at Neopets

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Neopets