Every public data breach

44 disclosed this week · 26,355 on record

XKCD

Disclosed Sep 1, 2019561,991 accountsUnverified

In July 2019, the forum for webcomic XKCD suffered a data breach that impacted 562k subscribers. The breached phpBB forum leaked usernames, email and IP addresses and passwords stored in MD5 phpBB3 format. The data was provided to HIBP by white hat security researcher and data analyst Adam Davies.

What is known

People affected561,991 (accounts in the leaked data, per Have I Been Pwned)
DisclosedSep 1, 2019
HappenedJul 1, 2019
AttackNot stated
Data exposedEmailsIP addressesPasswords
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about XKCD