Skip to content
Breaches.

Credential stuffing breaches

28 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Chick-fil-AChick-fil-A One loyalty accounts hit by credential stuffing, 13,322 affectedJul 202 months agoCredential stuffing13K
PcComponentesPcComponentes denies database breach but confirms credential stuffing attackJan 218 months agoCredential stuffingUnknown
Synthient Credential Stuffing Threat DataNov 6, 202510 months agoCredential stuffingUnverified2Bacct
DraftKingsCredential stuffing breaches DraftKings customer accountsOct 2, 202511 months agoCredential stuffingUnverifiedUnknown
North FaceCredential stuffing attack hits The North Face customer accountsMay 29, 20251 year agoCredential stuffingUnknown
AustralianSuperCredential stuffing wave breaches Australian super fund accountsApr 4, 20251 year agoCredential stuffingUnverifiedUnknown
MicrosoftStorm-2139 used stolen customer credentials to hijack Azure OpenAI accountsFeb 26, 20251 year agoCredential stuffingUnknown
Hot TopicHacker offers Hot Topic loyalty database after infostealer compromiseOct 23, 20241 year agoCredential stuffingUnverifiedUnknown
Neiman MarcusNeiman Marcus customer data stolen in Snowflake-related attackJun 24, 20242 years agoCredential stuffingUnverified64K
Advance Auto PartsSnowflake-linked breach exposes data of 2.3 million applicants and employeesJun 14, 20242 years agoCredential stuffing2.3M
EverpurePure Storage Snowflake workspace breached, telemetry and customer contacts exposedJun 10, 20242 years agoCredential stuffingUnknown
QuoteWizardLendingTree subsidiary QuoteWizard data hit in Snowflake customer attacksJun 7, 20242 years agoCredential stuffingUnknown
TicketekTicketek Australia customer data taken from third-party cloud platformMay 31, 20242 years agoCredential stuffing18Macct
TicketmasterTicketmaster customer data stolen from Snowflake cloud database and offered for saleMay 31, 20242 years agoCredential stuffing1,000
SantanderSantander customer and staff data accessed through third-party databaseMay 14, 20242 years agoCredential stuffingUnverifiedUnknown
AT&TCall and text records of nearly all AT&T wireless customers stolen via SnowflakeMar 19, 20242 years agoCredential stuffing110M
RokuCredential stuffing compromises about 15,000 Roku accountsMar 8, 20242 years agoCredential stuffing576K
Naz.APIJan 17, 20242 years agoCredential stuffingUnverified71Macct
23andMeCredential stuffing exposed 6.9M users' ancestry data; UK ICO fine of GBP 2.31MOct 6, 20232 years agoCredential stuffing6.9M
Polish CredentialsMay 30, 20233 years agoCredential stuffingUnverified1.2Macct
Chick-fil-AAutomated credential stuffing attack compromises Chick-fil-A One accountsMar 2, 20233 years agoCredential stuffingUnknown
PayPalCredential stuffing attack exposes Social Security numbers in PayPal accountsJan 18, 20233 years agoCredential stuffing35K
Dunkin' BrandsCredential stuffing hit tens of thousands of accounts; USD 650,000 NY AG settlementSep 26, 20197 years agoCredential stuffingUnknown
TaxSlayerHackers took over nearly 9,000 TaxSlayer accounts to file fraudulent returnsJan 29, 201610 years agoCredential stuffing8,800
Internal Revenue ServiceCriminals abuse IRS Get Transcript tool to pull prior-year tax returnsMay 26, 201511 years agoCredential stuffing700K
DropboxStolen employee password leads to Dropbox user email theft; 68M credentials later leakJul 31, 201214 years agoCredential stuffing69M
Monster.comTrojan harvests 1.6 million entries from job site's resume databaseAug 21, 200719 years agoCredential stuffingUnverified1.6M
LexisNexis Legal & ProfessionalIdentity thieves used stolen passwords to pull data on 316,000 people from AccurintMar 10, 200521 years agoCredential stuffing316K

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.