Data breaches in 2016

The public breach catalog records 103 breaches dated 2016, exposing about 1.7B accounts. 84 of them (82%) included passwords. The data type exposed most often was email addresses, found in 103 breaches.

2015 had 76 recorded breaches exposing about 490M accounts.

Largest breaches

  • Exploit.In: 2016-10-13, 593M accounts, Email addresses, Passwords
  • Anti Public Combo List: 2016-12-16, 458M accounts, Email addresses, Passwords
  • Adult FriendFinder (2016): 2016-10-16, 170M accounts, Email addresses, Passwords, Spoken languages, Usernames
  • Youku: 2016-12-01, 92M accounts, Email addresses, Passwords
  • Dailymotion: 2016-10-20, 85M accounts, Email addresses, Passwords, Usernames
  • Modern Business Solutions: 2016-10-08, 59M accounts, Dates of birth, Email addresses, Genders, IP addresses, Job titles, Names
  • Evony: 2016-06-01, 29M accounts, Email addresses, IP addresses, Passwords, Usernames
  • Mate1.com: 2016-02-29, 27M accounts, Astrological signs, Dates of birth, Drinking habits, Drug habits, Education levels, Email addresses
  • GFAN: 2016-10-10, 23M accounts, Email addresses, IP addresses, Passwords, Usernames
  • Cross Fire: 2016-08-08, 13M accounts, Email addresses, Passwords, Usernames

What was exposed most often

Every breach dated 2016

  • Exploit.In: 2016-10-13, 593M accounts, Email addresses, Passwords
  • Anti Public Combo List: 2016-12-16, 458M accounts, Email addresses, Passwords
  • Adult FriendFinder (2016): 2016-10-16, 170M accounts, Email addresses, Passwords, Spoken languages, Usernames
  • Youku: 2016-12-01, 92M accounts, Email addresses, Passwords
  • Dailymotion: 2016-10-20, 85M accounts, Email addresses, Passwords, Usernames
  • Modern Business Solutions: 2016-10-08, 59M accounts, Dates of birth, Email addresses, Genders, IP addresses, Job titles, Names
  • NetProspex: 2016-09-01, 34M accounts, Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses
  • Evony: 2016-06-01, 29M accounts, Email addresses, IP addresses, Passwords, Usernames
  • Mate1.com: 2016-02-29, 27M accounts, Astrological signs, Dates of birth, Drinking habits, Drug habits, Education levels, Email addresses
  • GFAN: 2016-10-10, 23M accounts, Email addresses, IP addresses, Passwords, Usernames
  • Cross Fire: 2016-08-08, 13M accounts, Email addresses, Passwords, Usernames
  • Whitepages: 2016-06-27, 12M accounts, Email addresses, Names, Passwords
  • Tunngle: 2016-07-01, 8.2M accounts, Email addresses, IP addresses, Passwords, Usernames
  • Data Enrichment Records: 2016-12-23, 8.2M accounts, Buying preferences, Charitable donations, Credit status information, Dates of birth, Email addresses, Family structure
  • Digimon: 2016-09-05, 7.7M accounts, Email addresses, Email messages, IP addresses, Names
  • uuu9: 2016-09-06, 7.5M accounts, Email addresses, Passwords, Usernames
  • RankWatch: 2016-11-19, 7.4M accounts, Email addresses, Employers, Job titles, Names, Phone numbers
  • Lifeboat: 2016-01-01, 7.1M accounts, Email addresses, Passwords, Usernames
  • CashCrate: 2016-11-17, 6.8M accounts, Email addresses, Names, Passwords, Physical addresses
  • Aipai.com: 2016-09-27, 6.5M accounts, Email addresses, Passwords
  • SubaGames: 2016-11-01, 6.1M accounts, Email addresses, Passwords, Usernames
  • Leet: 2016-09-10, 5.1M accounts, Email addresses, IP addresses, Passwords, Usernames, Website activity
  • Пара Па: 2016-08-08, 4.9M accounts, Email addresses, Passwords, Usernames
  • 17: 2016-04-19, 4.0M accounts, Device information, Email addresses, IP addresses, Passwords, Usernames
  • Kaneva: 2016-07-01, 3.9M accounts, Dates of birth, Email addresses, Passwords, Usernames
  • NemoWeb: 2016-09-04, 3.5M accounts, Email addresses, Names
  • DLH.net: 2016-07-31, 3.3M accounts, Dates of birth, Email addresses, Names, Passwords, Usernames, Website activity
  • Uiggy: 2016-06-01, 2.7M accounts, Email addresses, Genders, Names, Social connections, Website activity
  • GSM Hosting: 2016-08-01, 2.6M accounts, Email addresses, IP addresses, Passwords, Usernames
  • Funimation: 2016-07-01, 2.5M accounts, Dates of birth, Email addresses, Passwords, Usernames
  • ClixSense: 2016-09-04, 2.4M accounts, Account balances, Dates of birth, Email addresses, Genders, IP addresses, Names
  • FashionFantasyGame: 2016-12-01, 2.4M accounts, Email addresses, Passwords
  • Wishbone (2016): 2016-08-07, 2.2M accounts, Auth tokens, Dates of birth, Email addresses, Genders, Names, Phone numbers
  • i-Dressup: 2016-07-15, 2.2M accounts, Email addresses, Passwords
  • Shadi.com: 2016-07-09, 2.0M accounts, Email addresses, Passwords
  • V-Tight Gel: 2016-02-13, 2.0M accounts, Email addresses, IP addresses, Names, Phone numbers, Physical addresses
  • KnownCircle: 2016-04-12, 2.0M accounts, Email addresses, Email messages, Genders, Names, Passwords, Phone numbers
  • Dota2: 2016-07-10, 1.9M accounts, Email addresses, IP addresses, Passwords, Usernames
  • CD Projekt RED: 2016-03-01, 1.9M accounts, Email addresses, Passwords, Usernames
  • Flash Flash Revolution (2016 breach): 2016-02-01, 1.8M accounts, Email addresses, Passwords, Usernames
  • Clash of Kings: 2016-07-14, 1.6M accounts, Email addresses, IP addresses, Passwords, Usernames
  • Nival: 2016-02-29, 1.5M accounts, Avatars, Dates of birth, Email addresses, Genders, Names, Spoken languages
  • Army Force Online: 2016-05-18, 1.5M accounts, Avatars, Email addresses, Geographic locations, IP addresses, Names, Passwords
  • KM.RU: 2016-02-29, 1.5M accounts, Dates of birth, Email addresses, Genders, Geographic locations, Recovery email addresses, Security questions and answers
  • Naughty America: 2016-03-14, 1.4M accounts, Dates of birth, Email addresses, IP addresses, Passwords, Usernames, Website activity
  • AbuseWith.Us: 2016-07-01, 1.4M accounts, Email addresses, IP addresses, Passwords, Usernames
  • GameVN: 2016-05-01, 1.4M accounts, Email addresses, IP addresses, Passwords, Usernames
  • MangaFox.me: 2016-06-01, 1.3M accounts, Dates of birth, Email addresses, IP addresses, Passwords, Usernames
  • Fur Affinity: 2016-05-17, 1.3M accounts, Email addresses, Passwords, Usernames
  • Warmane: 2016-12-01, 1.1M accounts, Dates of birth, Email addresses, Passwords, Usernames
  • GeekedIn: 2016-08-15, 1.1M accounts, Email addresses, Geographic locations, Names, Professional skills, Usernames, Years of professional experience
  • Shotbow: 2016-05-09, 1.1M accounts, Email addresses, Passwords, Usernames
  • OnRPG: 2016-07-01, 1.0M accounts, Email addresses, IP addresses, Passwords, Usernames
  • StreetEasy: 2016-06-28, 988K accounts, Email addresses, Names, Passwords, Usernames
  • Tuned Global: 2016-03-16, 986K accounts, Email addresses, Names, Passwords, Phone numbers, Physical addresses
  • AKP Emails: 2016-07-19, 917K accounts, Email addresses, Email messages
  • XPG: 2016-01-01, 890K accounts, Email addresses, IP addresses, Passwords, Usernames
  • MoDaCo: 2016-01-01, 880K accounts, Email addresses, IP addresses, Passwords, Usernames
  • MDPI: 2016-08-30, 845K accounts, Email addresses, Email messages, IP addresses, Names
  • Pokémon Negro: 2016-10-01, 830K accounts, Email addresses, IP addresses, Passwords

Frequently asked questions

How many data breaches were there in 2016?

The public breach catalog records 103 breaches dated 2016, exposing about 1.7B accounts. The number keeps rising for recent years because breaches are often disclosed long after they happen.

What was the biggest data breach of 2016?

Exploit.In, with about 593M accounts, is the largest breach dated 2016 in this directory.

Were passwords leaked in 2016 breaches?

84 of the 103 breaches dated 2016 (82%) included passwords. If you had an account with any of them, change that password and anywhere you reused it.

Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.