Data breaches that exposed Passwords
611 breaches (64.5% of the total) exposed Passwords. Below are the yearly counts and the 50 largest of these breaches.
Breaches per year
| Year | Matching | All |
|---|---|---|
| 2007 | 1 | 1 |
| 2008 | 3 | 3 |
| 2009 | 1 | 2 |
| 2010 | 2 | 4 |
| 2011 | 12 | 15 |
| 2012 | 19 | 19 |
| 2013 | 27 | 28 |
| 2014 | 44 | 48 |
| 2015 | 61 | 67 |
| 2016 | 76 | 94 |
| 2017 | 39 | 50 |
| 2018 | 58 | 70 |
| 2019 | 56 | 80 |
| 2020 | 68 | 93 |
| 2021 | 43 | 67 |
| 2022 | 28 | 55 |
| 2023 | 17 | 42 |
| 2024 | 28 | 76 |
| 2025 | 16 | 52 |
| 2026 | 12 | 82 |
Largest breaches
| Service | Breach date | Accounts | Risk |
|---|---|---|---|
| Synthient Credential Stuffing Threat Data | 2025-04-11 | 1,957,476,021 | 64 |
| Collection #1 * | 2019-01-07 | 772,904,991 | 64 |
| Onliner Spambot * | 2017-08-28 | 711,477,622 | 64 |
| Exploit.In * | 2016-10-13 | 593,427,119 | 64 |
| Anti Public Combo List * | 2016-12-16 | 457,962,538 | 64 |
| Combolists Posted to Telegram | 2024-05-28 | 361,468,099 | 66 |
| MySpace | 2008-07-01 | 359,420,698 | 66 |
| ALIEN TXTBASE Stealer Logs | 2025-02-15 | 284,132,969 | 64 |
| Wattpad | 2020-06-29 | 268,765,495 | 78 |
| NetEase * | 2015-10-19 | 234,842,089 | 64 |
| Cit0day * | 2020-11-04 | 226,883,414 | 64 |
| Synthient Stealer Log Threat Data | 2025-04-11 | 182,962,095 | 64 |
| Zynga | 2019-09-01 | 172,869,660 | 71 |
| 2012-05-05 | 164,611,595 | 64 | |
| Dubsmash | 2018-12-01 | 161,749,950 | 75 |
| Adobe | 2013-10-04 | 152,445,165 | 76 |
| MyFitnessPal | 2018-02-01 | 143,606,147 | 68 |
| Canva | 2019-05-24 | 137,272,116 | 70 |
| Pemiblanc * | 2018-04-02 | 110,964,206 | 64 |
| Data Troll Stealer Logs | 2025-06-20 | 109,532,219 | 64 |
| Evite | 2013-08-11 | 100,985,047 | 80 |
| 1win | 2024-11-02 | 96,166,543 | 76 |
| VK | 2012-01-01 | 93,338,602 | 72 |
| MyHeritage | 2017-10-26 | 91,991,358 | 64 |
| Youku | 2016-12-01 | 91,890,110 | 64 |
| Rambler | 2014-03-01 | 91,436,280 | 66 |
| Dailymotion | 2016-10-20 | 85,176,234 | 66 |
| 2,844 Separate Data Breaches * | 2018-02-19 | 80,115,532 | 64 |
| JD | 2013-01-01 | 77,449,341 | 71 |
| Nitro | 2020-09-28 | 77,159,696 | 67 |
| Tokopedia | 2020-04-17 | 71,443,698 | 72 |
| Stealer Logs, Jan 2025 | 2025-01-13 | 71,039,833 | 64 |
| Naz.API | 2023-09-20 | 70,840,771 | 64 |
| Dropbox | 2012-07-01 | 68,648,009 | 64 |
| tumblr | 2013-02-28 | 65,469,298 | 64 |
| The Post Millennial | 2024-05-02 | 56,973,345 | 79 |
| June 2026 Stealer Logs | 2026-06-15 | 56,278,397 | 64 |
| iMesh | 2013-09-22 | 49,467,477 | 68 |
| Netlog | 2012-11-01 | 49,038,354 | 64 |
| Houzz | 2018-05-23 | 48,881,308 | 73 |
| Edmodo | 2017-05-11 | 43,423,561 | 66 |
| Kayo.moe Credential Stuffing List * | 2018-09-11 | 41,826,763 | 64 |
| piZap | 2017-12-07 | 41,817,893 | 74 |
| ShareThis | 2018-07-09 | 40,960,499 | 71 |
| Chegg | 2018-04-28 | 39,721,127 | 77 |
| SHEIN | 2018-06-01 | 39,086,762 | 64 |
| Canadian Tire | 2025-10-02 | 38,306,562 | 85 |
| Last.fm | 2012-03-22 | 37,217,682 | 68 |
| Poshmark | 2018-05-16 | 36,395,491 | 71 |
| Internet Archive | 2024-09-28 | 31,081,179 | 66 |
* = The original data marks this breach as unverified, possibly fabricated, or a spam list.
This site organizes publicly available information about data breaches. Data as of October 9, 2026. Breach dates are as originally listed; when only the month is known, the date is recorded as the 1st.