Staminus
Disclosed Oct 5, 20178 years ago26,815 accountsUnverified
In March 2016, the DDoS protection service Staminus was "massively hacked" resulting in an outage of more than 20 hours and the disclosure of customer credentials (with unsalted MD5 hashes), support tickets, credit card numbers and other sensitive data. 27k unique email addresses were found in the data which was subsequently released to the public. Staminus is no longer in operation.
What is known
| People affected | 26,815 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Oct 5, 2017 |
| Happened | Mar 11, 2016 |
| Attack | Hacking |
| Data exposed | Payment cards, Emails, IP addresses, Passwords |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Staminushaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Oct 5, 2017 | 26,815 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.