Live breach tracker

The breach landscape, right now

These figures come straight from the Have I Been Pwned breach database and refresh automatically. They show why “just be careful” isn't enough — your data is likely in here already, and the fix is to monitor and respond.

1.0K

known breaches tracked

17.8B

accounts exposed in total

2026

most recent breach year on record

Known breaches by year
2019
82
2020
98
2021
78
2022
61
2023
46
2024
85
2025
61
2026
69

Number of catalogued breaches per year (Have I Been Pwned).

Data most often exposed
Email addresses
99%
Passwords
66%
Names
53%
Usernames
47%
IP addresses
38%
Phone numbers
36%

Share of breaches that exposed each type of personal data.

Biggest breaches on record

  1. 1
    Synthient Credential Stuffing Threat Data
    2.0B
  2. 2
    Collection #1
    772.9M
  3. 3
    Verifications.ioverifications.io
    763.1M
  4. 4
    Onliner Spambot
    711.5M
  5. 5
    Data Enrichment Exposure From PDL Customer
    622.2M
  6. 6
    Exploit.In
    593.4M
  7. 7
    Facebookfacebook.com
    509.5M
  8. 8
    Anti Public Combo List
    458.0M

Ranked by number of accounts exposed.

Most recently added breaches

  • Houston City College2026-06-16

    hccs.edu

    831.6K accounts exposed

    Exposed: Academic records, Citizenship statuses, Dates of birth, Email addresses, Genders, Names, Phone numbers, Physical addresses

  • Suno2025-11-25

    suno.com

    55.3M accounts exposed

    Exposed: Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses, Purchases

  • Paidwork2026-03-29

    paidwork.com

    23.3M accounts exposed

    Exposed: Bank account numbers, Dates of birth, Device information, Education levels, Email addresses, Financial transactions, Genders, IP addresses

  • Fluke2026-07-01

    fluke.com

    821.1K accounts exposed

    Exposed: Email addresses, Employers, Job titles, Names, Physical addresses, Support tickets

  • Goose Creek2026-06-09

    goosecreek.com

    6.6M accounts exposed

    Exposed: Email addresses, Names, Phone numbers, Physical addresses, Purchases

  • Glendale Community College2026-06-15

    glendale.edu

    793.9K accounts exposed

    Exposed: Academic records, Dates of birth, Email addresses, Genders, Government issued IDs, Names, Phone numbers, Physical addresses

  • Moody Bible Institute2026-06-15

    moody.edu

    2.3M accounts exposed

    Exposed: Dates of birth, Email addresses, Genders, Marital statuses, Names, Phone numbers, Physical addresses

  • Sysco2026-06-15

    sysco.com

    2.7M accounts exposed

    Exposed: Customer feedback, Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses, Usernames

  • American Tower2026-06-12

    americantower.com

    216.6K accounts exposed

    Exposed: Email addresses, Job titles, Names, Phone numbers, Physical addresses

  • Madison Square Garden Sports2026-06-05

    msgsports.com

    9.8M accounts exposed

    Exposed: Customer service records, Email addresses, Names, Phone numbers, Physical addresses

  • JCPenney2026-06-12

    jcpenny.com

    368.4K accounts exposed

    Exposed: Dates of birth, Email addresses, Government issued IDs, Job titles, Names, Phone numbers, Physical addresses, Usernames

  • Ralph Lauren2026-06-11

    ralphlauren.com

    139.9K accounts exposed

    Exposed: Age groups, Email addresses, Genders, Names, Phone numbers

Has your email been caught in a breach?

Find out in seconds, then get a clear plan to lock things down — free to start.

Source: Have I Been Pwned, a respected independent breach database. Figures update automatically and reflect breaches known to that service — the true number of breaches is larger. Shown for general awareness; TrueID.Help is a protection toolkit, not an insurance policy.