Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Neopets

Disclosed Aug 29, 202269,000,000 affectedConfirmed

Official notice

What is known

People affected69,000,000 (as reported by the organization)
DisclosedAug 29, 2022
DiscoveredJul 20, 2022
HappenedJan 3, 2021
AttackHacking
Data exposedNamesCredentials and tokens
SectorOther · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: Neopets
Official noticeatg.wa.gov
Washington Attorney General breach notice: Neopets
Official noticeattorneygeneral.delaware.gov
Notice letter filed with the Delaware DOJ: Neopets
Official noticejustice.oregon.gov
Oregon DOJ breach notice: Neopets

Notices filed

Residents of WAAug 29, 2022
Washington AG788,415 people
Residents of DEAug 29, 2022
Delaware DOJ109,758 people
Residents of CAAug 30, 2022
California AGCount not stated
Residents of ORAug 30, 2022
Oregon DOJCount not stated

Other breaches at Neopets

Hacking breachHacking exposed dates of birth, emails, location data, IP addresses, names and passwords.27M accountsTechUSUnverifiedJul 7, 2016
History of this record
data_types2026-09-25
[] to ["names","credentials"]by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 69000000by backfillSource
attack2026-09-25
unknown to hackingby backfillSource
disclosed2026-09-25
2022-08-30 to 2022-08-29by backfillSource
discovered2026-09-25
empty to 2022-07-20by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Neopets