Skip to content
Breaches.

Neopets

Disclosed Jul 7, 201610 years ago26,892,897 accountsUnverified

In May 2016, a set of breached data originating from the virtual pet website "Neopets" was found being traded online . Allegedly hacked "several years earlier", the data contains sensitive personal information including birthdates, genders and names as well as almost 27 million unique email addresses. Passwords were stored in plain text and IP addresses were also present in the breach.

What is known

People affected26,892,897 (accounts in the leaked data, per Have I Been Pwned)
DisclosedJul 7, 2016
HappenedMay 5, 2013
AttackHacking
Data exposedDates of birth, Emails, Location, IP addresses, Names, Passwords
SectorTech · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Neopetshaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataJul 7, 201626,892,897

Other breaches at Neopets

BreachAffected
Disclosed Aug 29, 2022Aug 29, 20224 years agoHacking69M
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Neopets

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.