Data breaches in 2018

The public breach catalog records 78 breaches dated 2018, exposing about 1.4B accounts. 64 of them (82%) included passwords. The data type exposed most often was email addresses, found in 77 breaches.

2017 had 54 recorded breaches exposing about 1.6B accounts.

Largest breaches

  • Dubsmash: 2018-12-01, 162M accounts, Email addresses, Geographic locations, Names, Passwords, Phone numbers, Spoken languages
  • MyFitnessPal: 2018-02-01, 144M accounts, Email addresses, IP addresses, Passwords, Usernames
  • Exactis: 2018-06-01, 132M accounts, Credit status information, Dates of birth, Education levels, Email addresses, Ethnicities, Family structure
  • Apollo: 2018-07-23, 126M accounts, Email addresses, Employers, Geographic locations, Job titles, Names, Phone numbers
  • Pemiblanc: 2018-04-02, 111M accounts, Email addresses, Passwords
  • 2,844 Separate Data Breaches: 2018-02-19, 80M accounts, Email addresses, Passwords
  • You've Been Scraped: 2018-10-05, 66M accounts, Email addresses, Employers, Geographic locations, Job titles, Names, Social media profiles
  • Houzz: 2018-05-23, 49M accounts, Email addresses, Geographic locations, IP addresses, Names, Passwords, Social media profiles
  • Data & Leads: 2018-11-14, 44M accounts, Email addresses, Employers, IP addresses, Job titles, Names, Phone numbers
  • Kayo.moe Credential Stuffing List: 2018-09-11, 42M accounts, Email addresses, Passwords

What was exposed most often

Every breach dated 2018

  • Dubsmash: 2018-12-01, 162M accounts, Email addresses, Geographic locations, Names, Passwords, Phone numbers, Spoken languages
  • MyFitnessPal: 2018-02-01, 144M accounts, Email addresses, IP addresses, Passwords, Usernames
  • Exactis: 2018-06-01, 132M accounts, Credit status information, Dates of birth, Education levels, Email addresses, Ethnicities, Family structure
  • Apollo: 2018-07-23, 126M accounts, Email addresses, Employers, Geographic locations, Job titles, Names, Phone numbers
  • Pemiblanc: 2018-04-02, 111M accounts, Email addresses, Passwords
  • 2,844 Separate Data Breaches: 2018-02-19, 80M accounts, Email addresses, Passwords
  • You've Been Scraped: 2018-10-05, 66M accounts, Email addresses, Employers, Geographic locations, Job titles, Names, Social media profiles
  • Houzz: 2018-05-23, 49M accounts, Email addresses, Geographic locations, IP addresses, Names, Passwords, Social media profiles
  • Data & Leads: 2018-11-14, 44M accounts, Email addresses, Employers, IP addresses, Job titles, Names, Phone numbers
  • Trik Spam Botnet: 2018-06-12, 43M accounts, Email addresses
  • Kayo.moe Credential Stuffing List: 2018-09-11, 42M accounts, Email addresses, Passwords
  • ShareThis: 2018-07-09, 41M accounts, Dates of birth, Email addresses, Names, Passwords
  • Chegg: 2018-04-28, 40M accounts, Email addresses, Names, Passwords, Phone numbers, Physical addresses, Usernames
  • SHEIN: 2018-06-01, 39M accounts, Email addresses, Passwords
  • Poshmark: 2018-05-16, 36M accounts, Email addresses, Genders, Geographic locations, Names, Passwords, Usernames
  • HauteLook: 2018-08-07, 29M accounts, Dates of birth, Email addresses, Genders, Geographic locations, Names, Passwords
  • Ticketfly: 2018-05-31, 26M accounts, Email addresses, Names, Phone numbers, Physical addresses
  • Wanelo: 2018-12-13, 23M accounts, Email addresses, IP addresses, Names, Passwords, Physical addresses
  • Animoto: 2018-07-10, 22M accounts, Dates of birth, Email addresses, Geographic locations, Names, Passwords
  • EyeEm: 2018-02-28, 20M accounts, Bios, Email addresses, Names, Passwords, Usernames
  • Romwe: 2018-06-01, 20M accounts, Geographic locations, IP addresses, Names, Passwords, Phone numbers, Physical addresses
  • Fotolog: 2018-12-01, 17M accounts, Email addresses, Passwords, Usernames
  • 8fit: 2018-07-01, 15M accounts, Email addresses, Genders, Geographic locations, IP addresses, Names, Passwords
  • 500px: 2018-07-05, 15M accounts, Dates of birth, Email addresses, Genders, Geographic locations, Names, Passwords
  • Jobandtalent: 2018-02-01, 11M accounts, Email addresses, IP addresses, Names, Passwords
  • Adapt: 2018-11-05, 9.4M accounts, Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses
  • BlankMediaGames: 2018-12-28, 7.6M accounts, Browser user agent details, Email addresses, IP addresses, Passwords, Purchases, Usernames
  • Elasticsearch Instance of Sales Leads on AWS: 2018-10-29, 5.8M accounts, Email addresses, Employers, Names, Physical addresses
  • Stronghold Kingdoms: 2018-07-04, 5.2M accounts, Email addresses, Passwords, Usernames
  • IIMJobs: 2018-12-31, 4.2M accounts, Dates of birth, Email addresses, Geographic locations, IP addresses, Job applications, Job titles
  • Roll20: 2018-12-26, 4.0M accounts, Email addresses, IP addresses, Names, Partial credit card data, Passwords
  • Bookmate: 2018-07-08, 3.8M accounts, Dates of birth, Email addresses, Genders, Geographic locations, Names, Passwords
  • Zoomcar: 2018-07-01, 3.6M accounts, Email addresses, IP addresses, Names, Passwords, Phone numbers
  • Pluto TV: 2018-10-12, 3.2M accounts, Dates of birth, Device information, Email addresses, Genders, IP addresses, Names
  • VimeWorld: 2018-10-01, 3.1M accounts, Email addresses, IP addresses, Passwords, Usernames
  • Eatigo: 2018-10-16, 2.8M accounts, Email addresses, Genders, Names, Passwords, Phone numbers, Social media profiles
  • Morele.net: 2018-10-10, 2.5M accounts, Email addresses, Names, Passwords, Phone numbers
  • SaverSpy: 2018-09-18, 2.5M accounts, Email addresses, Genders, Names, Physical addresses
  • Elanic: 2018-01-01, 2.3M accounts, Email addresses, Geographic locations, Usernames
  • PropTiger: 2018-01-30, 2.2M accounts, Dates of birth, Device information, Email addresses, Genders, IP addresses, Names
  • Club Penguin Rewritten (January 2018): 2018-01-21, 1.7M accounts, Email addresses, IP addresses, Passwords, Usernames
  • Fashion Nexus: 2018-07-09, 1.3M accounts, Browser user agent details, Dates of birth, Email addresses, Genders, IP addresses, Names
  • Wife Lovers: 2018-10-07, 1.3M accounts, Email addresses, IP addresses, Names, Passwords, Usernames
  • Emuparadise: 2018-04-01, 1.1M accounts, Email addresses, IP addresses, Passwords, Usernames
  • Artsy: 2018-04-01, 1.1M accounts, Email addresses, IP addresses, Names, Passwords
  • Knuddels: 2018-09-05, 808K accounts, Email addresses, Geographic locations, Names, Passwords, Usernames
  • ViewFines: 2018-05-07, 778K accounts, Email addresses, Government issued IDs, Names, Passwords, Phone numbers
  • Funny Games: 2018-04-28, 764K accounts, Email addresses, IP addresses, Passwords, Usernames
  • Estonian Citizens (via Estonian Cybercrime Bureau): 2018-06-07, 655K accounts, Email addresses, Passwords
  • Mortal Online: 2018-06-17, 607K accounts, Email addresses, Names, Passwords, Physical addresses, Usernames
  • Bombuj.eu: 2018-12-07, 575K accounts, Email addresses, Passwords
  • Florida Virtual School: 2018-02-12, 543K accounts, Dates of birth, Email addresses, Names, Passwords, School grades (class levels), Usernames
  • Multiplayer.it: 2018-09-01, 504K accounts, Email addresses, Passwords
  • Creative: 2018-05-01, 483K accounts, Email addresses, IP addresses, Passwords, Usernames
  • DailyObjects: 2018-01-01, 464K accounts, Email addresses, Names, Passwords, Phone numbers, Physical addresses
  • HTH Studios: 2018-08-24, 412K accounts, Browser user agent details, Dates of birth, Email addresses, IP addresses, Names, Phone numbers
  • Lolzteam: 2018-05-13, 398K accounts, Email addresses, Usernames
  • Linux Forums: 2018-05-01, 276K accounts, Email addresses, IP addresses, Passwords, Usernames
  • Ajarn: 2018-12-13, 266K accounts, Dates of birth, Education levels, Email addresses, Genders, Geographic locations, Job applications
  • Technic: 2018-11-30, 265K accounts, Chat logs, Email addresses, IP addresses, Passwords, Private messages, Time zones

Frequently asked questions

How many data breaches were there in 2018?

The public breach catalog records 78 breaches dated 2018, exposing about 1.4B accounts. The number keeps rising for recent years because breaches are often disclosed long after they happen.

What was the biggest data breach of 2018?

Dubsmash, with about 162M accounts, is the largest breach dated 2018 in this directory.

Were passwords leaked in 2018 breaches?

64 of the 78 breaches dated 2018 (82%) included passwords. If you had an account with any of them, change that password and anywhere you reused it.

Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.