Breachesby GlyphStaminus
Disclosed Oct 5, 201726,815 accountsUnverified
In March 2016, the DDoS protection service Staminus was "massively hacked" resulting in an outage of more than 20 hours and the disclosure of customer credentials (with unsalted MD5 hashes), support tickets, credit card numbers and other sensitive data. 27k unique email addresses were found in the data which was subsequently released to the public. Staminus is no longer in operation.
What is known
| People affected | 26,815 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Oct 5, 2017 |
| Happened | Mar 11, 2016 |
| Attack | Hacking |
| Data exposed | Payment cardsEmailsIP addressesPasswords |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.