Risk level: low. Can you change it: yes. Found in 387 breaches in this directory.
What this data is
The network addresses your devices used when you signed up, logged in or posted, recorded by almost every website in its access logs.
The risk on its own
This is low risk for most people, even though it appears in a great many breaches. An IP address points to your internet provider and an approximate area, often a city, not your home address. Many home and mobile connections change address regularly, so an old one may now belong to someone else.
The risk combined with other data
Linked to your email and account, it can connect accounts used from the same connection and confirm which city you were in. Someone with a grudge, such as an angry opponent in an online game, may try to flood a current home IP with traffic to knock you offline. Only your internet provider can match an IP to a street address, and it normally does so only for police or under a court order.
How criminals use it
A pseudonymous account and your real account are linked because both logged in from the same IP address.
A player who obtained your IP launches a denial of service attack to knock your home connection offline mid-game.
A scam email quotes your IP address and city as proof that your computer has been hacked.
What to do now
Do not panic about this field. Change the password on the breached account and check what else leaked with it.
If your connection is being attacked, restart your router or ask your internet provider for a new IP address.
Use a reputable VPN on public Wi-Fi or when you want your IP hidden from sites and other players.
Ignore emails that quote your IP address as proof of hacking.
Review the login history on your important accounts for sign-ins from places you do not recognise.
Frequently asked questions
Can someone find my house with my IP address?
Not usually. An IP address shows your provider and rough area. Matching it to an address needs your provider's records, which normally require police or a court order.
Can I change my IP address?
Often yes. Restarting your router may give you a new one, or your provider can change it. Mobile connections change frequently on their own.
Do I need a VPN because of this breach?
No. A VPN hides your IP from websites from now on, but it does nothing about the old address in the leak.
Breaches that exposed this data
Verifications.io: 2019-02-25, 763M accounts, Dates of birth, Email addresses, Employers, Genders, Geographic locations, IP addresses
River City Media Spam List: 2017-01-01, 393M accounts, Email addresses, IP addresses, Names, Physical addresses
Wattpad: 2020-06-29, 269M accounts, Bios, Dates of birth, Email addresses, Genders, Geographic locations, IP addresses
Deezer: 2019-04-22, 229M accounts, Dates of birth, Email addresses, Genders, Geographic locations, IP addresses, Names
MyFitnessPal: 2018-02-01, 144M accounts, Email addresses, IP addresses, Passwords, Usernames
Exactis: 2018-06-01, 132M accounts, Credit status information, Dates of birth, Education levels, Email addresses, Ethnicities, Family structure
1win: 2024-11-02, 96M accounts, Dates of birth, Email addresses, Geographic locations, IP addresses, Passwords, Phone numbers
Lead Hunter: 2020-03-04, 69M accounts, Email addresses, Genders, IP addresses, Names, Phone numbers, Physical addresses
Modern Business Solutions: 2016-10-08, 59M accounts, Dates of birth, Email addresses, Genders, IP addresses, Job titles, Names
The Post Millennial: 2024-05-02, 57M accounts, Email addresses, Genders, IP addresses, Names, Passwords, Phone numbers
Not Acxiom: 2020-06-21, 52M accounts, Email addresses, IP addresses, Names, Phone numbers, Physical addresses
iMesh: 2013-09-22, 49M accounts, Email addresses, IP addresses, Passwords, Usernames
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.