Skip to content

Who’s been pwned

A directory of every public breach in this service, with the data compromised in each one.

15 breaches

Twitter (200M) twitter.com

  • Verified
Breach date
1 Jan 2021
Compromised accounts
211,524,284

Compromised data:

  • Email addresses
  • Names
  • Social media profiles
  • Usernames
Risk level: Low

Facebook facebook.com

  • Verified
Breach date
1 Aug 2019
Compromised accounts
509,458,528

Compromised data:

  • Dates of birth
  • Email addresses
  • Employers
  • Genders
  • Geographic locations
  • Job titles
  • Names
  • Phone numbers
  • Relationship statuses
Risk level: Medium

Zynga zynga.com

  • Verified
Breach date
1 Sep 2019
Compromised accounts
172,869,660

Compromised data:

  • Email addresses
  • Passwords
  • Phone numbers
  • Usernames
Risk level: High

Canva canva.com

  • Verified
Breach date
24 May 2019
Compromised accounts
137,272,116

Compromised data:

  • Email addresses
  • Geographic locations
  • Names
  • Passwords
  • Usernames
Risk level: High

Dubsmash dubsmash.com

  • Verified
Breach date
1 Dec 2018
Compromised accounts
161,749,950

Compromised data:

  • Email addresses
  • Geographic locations
  • Names
  • Passwords
  • Phone numbers
  • Spoken languages
  • Usernames
Risk level: High

MyFitnessPal myfitnesspal.com

  • Verified
Breach date
1 Feb 2018
Compromised accounts
143,606,147

Compromised data:

  • Email addresses
  • IP addresses
  • Passwords
  • Usernames
Risk level: High

Collection #1

  • Unverified
Breach date
7 Jan 2019
Compromised accounts
772,904,991

Compromised data:

  • Email addresses
  • Passwords
Risk level: Medium

River City Media Spam List rivercitymediaonline.com

  • Verified
  • Spam list
Breach date
1 Jan 2017
Compromised accounts
393,430,309

Compromised data:

  • Email addresses
  • IP addresses
  • Names
  • Physical addresses
Risk level: Medium

Last.fm last.fm

  • Verified
Breach date
22 Mar 2012
Compromised accounts
37,217,682

Compromised data:

  • Email addresses
  • Passwords
  • Usernames
  • Website activity
Risk level: Medium

Dropbox dropbox.com

  • Verified
Breach date
1 Jul 2012
Compromised accounts
68,648,009

Compromised data:

  • Email addresses
  • Passwords
Risk level: Medium

MySpace myspace.com

  • Verified
Breach date
1 Jul 2008
Compromised accounts
359,420,698

Compromised data:

  • Email addresses
  • Passwords
  • Usernames
Risk level: Medium

Tumblr tumblr.com

  • Verified
Breach date
28 Feb 2013
Compromised accounts
65,469,298

Compromised data:

  • Email addresses
  • Passwords
Risk level: Medium

LinkedIn linkedin.com

  • Verified
Breach date
5 May 2012
Compromised accounts
164,611,595

Compromised data:

  • Email addresses
  • Passwords
Risk level: Medium

Ashley Madison ashleymadison.com

  • Verified
  • Sensitive
Breach date
19 Jul 2015
Compromised accounts
30,811,934

Compromised data:

  • Dates of birth
  • Email addresses
  • Ethnicities
  • Genders
  • Names
  • Passwords
  • Payment histories
  • Phone numbers
  • Physical addresses
  • Security questions and answers
  • Sexual orientations
  • Usernames
  • Website activity
Risk level: Critical

Adobe adobe.com

  • Verified
Breach date
4 Oct 2013
Compromised accounts
152,445,165

Compromised data:

  • Email addresses
  • Password hints
  • Passwords
  • Usernames
Risk level: High