Skip to content

Breaches that exposed credentials and tokens

261 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
JP Morgan ChaseDec 4, 201312 years agoUnknown
Delaware's SNAP & Summer Meals ProgramsDec 4, 201312 years agoUnknown
Drupal.orgHack of Drupal.org forces password reset for nearly 1 million accountsMay 29, 201313 years agoHackingUnverified1M
China Software Developer NetworkLeak exposes usernames and passwords of 6 million Chinese developer site usersDec 21, 201114 years agoHackingUnverified6M
Nexon KoreaHack exposes IDs, names and resident numbers of 13.2 million MapleStory playersNov 26, 201114 years agoHackingUnverified13M
ValveHackers access Steam user database holding encrypted card dataNov 11, 201114 years agoHackingUnknown
SK CommunicationsHackers steal personal data of 35 million Nate and Cyworld usersJul 28, 201115 years agoSupply chainUnverified35M
Washington PostHackers steal 1.27 million user IDs and emails from Post jobs siteJul 7, 201115 years agoHackingUnverified1.3M
TwitterHackers gained admin control of Twitter twice in 2009; FTC security orderJun 24, 201016 years agoHackingUnknown
RockYouSQL injection exposes 32 million plaintext passwords at RockYouDec 14, 200916 years agoHacking32M
CheckFreeHijacked CheckFree domains redirect bill payment users to malware siteJan 6, 200917 years agoHackingUnverified5M

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.