XposedOrNot

@XposedOrNot += Aura Data Breach The Aura #databreach occurred in March 2026 when the online safety service disclosed a breach involving data linked to a marketing tool from an acquired company, exposing 922K unique email addresses and associated information.

@XposedOrNot += Cal AI Data Breach The Cal AI #databreach occurred in March 2026 and exposed over 3M user records from the AI-powered calorie tracking app, including more than 2.8M unique email addresses and associated profile information. Exposed data: Email addresses, Names, Dates of birth, Genders, Usernames, Linked social media profiles

@XposedOrNot += Thermomix owners’ recipe forum Data Breach The Rezeptwelt #databreach occurred in January 2025 and exposed details of 3.1M registered users of the Thermomix owners’ recipe forum. Exposed data: Names, Email addresses, Physical addresses, Phone numbers, Dates of birth

@XposedOrNot += APOIA.se Data Breach The APOIA.se #databreach occurred in December 2025 when the platform’s database was posted to an online forum, later confirmed in January 2026, exposing 451K unique email addresses and associated user information.

@XposedOrNot += BitView Data Breach The BitView #databreach occurred in December 2024 and exposed 63K user records from the video-sharing community. Exposed data: Email addresses, IP addresses, Usernames, Passwords (bcrypt hashes), Gender, Dates of birth, Countries Potential risks: Account takeover, Credential stuffing, Phishing, Targeted scams, Privacy breaches

@XposedOrNot += Ggumim(Decorating the House) Data Breach The Ggumim #databreach occurred in March 2020, when the Korean interior decoration website ggumim.co.kr was compromised, affecting nearly 1.3M members, and the data was later widely shared online. Exposed data: Email addresses, Names, Usernames, Phone numbers Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches

@XposedOrNot += Figure Data Breach The Figure #databreach occurred in February 2026 after a social engineering attack led to customer data being publicly posted online, exposing around 970K unique email addresses and associated personal information. Exposed data: Email addresses, Names, Phone numbers, Physical addresses, Dates of birth Potential risks: Identity theft, Phishing, Financial fraud, Account takeover, Targeted scams, Privacy breaches

@XposedOrNot += Association Nationale des Premiers Secours (ANPS) Data Breach The Association Nationale des Premiers Secours (ANPS) #databreach occurred in January 2026 when data was posted to a hacking forum, exposing 5.6K unique email addresses and associated personal information. Exposed data: Email addresses, Names, Dates of birth, Places of birth Potential risks: Identity theft, Phishing, Targeted scams, Privacy breaches

@XposedOrNot += VimeWorld Data Breach The VimeWorld #databreach occurred in October 2018 when the Russian Minecraft server network was compromised, with 3.1M records later posted to a hacking forum. Exposed data: Usernames, Email addresses, IP addresses, Passwords (MD5 hashes, bcrypt hashes) Potential risks: Account takeover, Credential stuffing, Phishing, Targeted scams, Privacy breaches

@XposedOrNot += TheSqua.re Data Breach The TheSquare #databreach occurred in June 2025 when 107K unique customer email addresses were allegedly obtained and later posted to a popular hacking forum, along with additional personal details. Exposed data: Email addresses, Names, Phone numbers, Cities Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches

@XposedOrNot += Pass'Sport Data Breach The Pass'Sport #databreach occurred in December 2025 when data was posted to a popular hacking forum, exposing personal information from the French government sports subsidy program.

@XposedOrNot += Odido Data Breach The Odido #databreach occurred in February 2026 and involved a breach followed by an extortion attempt, with 2M records published across multiple leaks exposing 893K unique email addresses and associated customer information.

@XposedOrNot += MSI Data Breach The MSI #databreach occurred in July 2024 when RMA warranty claim data was found publicly accessible, impacting 250K unique email addresses along with associated customer records.

@XposedOrNot += Fotolog Data Breach The Fotolog #databreach occurred in December 2018 and exposed 16.7M unique email addresses along with usernames and unsalted SHA-256 password hashes.

@XposedOrNot += CarGurus Data Breach The CarGurus #databreach occurred in February 2026 when the threat actor ShinyHunters targeted the automotive marketplace, later publishing data publicly that exposed over 12M email addresses along with associated account and personal information.

@XposedOrNot += CarMax Data Breach The CarMax #databreach was reported in January 2026 after data allegedly sourced from its systems was published online. The exposed dataset contained 431k unique email addresses along with names, phone numbers, and physical addresses.

@XposedOrNot += Utair Data Breach The Utair #databreach was disclosed in August 2020 and reportedly dated back to the previous year. The exposed dataset contained over 400k unique email addresses along with extensive personal information, including names, physical addresses, dates of birth, and passport numbers.

@XposedOrNot += Cultura Data Breach The Cultura #databreach occurred in September 2024 following a cyber attack linked to an external IT service provider. The breach exposed almost 1.5M unique email addresses along with names, phone numbers, physical addresses, and order details.

@XposedOrNot += Latest Pilot Jobs Data Breach The Latest Pilot Jobs #databreach occurred in August 2022 and was later shared on a popular hacking forum. The exposed dataset contained 119k unique email addresses along with names, usernames, and passwords stored as unsalted MD5 hashes.

@XposedOrNot += Beckett Collectibles Data Breach The Beckett Collectibles #databreach occurred in November 2025 and was accompanied by website content defacement. The incident exposed the personal information of 1M users, including names, usernames, phone numbers, and physical addresses.