Every public data breach

47 disclosed this week · 26,367 on record

WPSandbox

Disclosed Nov 6, 2018858 accountsUnverified

In November 2018, the WordPress sandboxing service that allows people to create temporary websites WP Sandbox discovered their service was being used to host a phishing site attempting to collect Microsoft OneDrive accounts. After identifying the malicious site, WP Sandbox took it offline, contacted the 858 people who provided information to it then self-submitted their addresses to HIBP. The phishing page requested both email addresses and passwords.

What is known

People affected858 (accounts in the leaked data, per Have I Been Pwned)
DisclosedNov 6, 2018
HappenedNov 4, 2018
AttackPhishing
Data exposedEmailsPasswords
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about WPSandbox