Recent Data Leaks
Live
← Back to timeline

Data breaches in 2012

19 tracked incidents from 2012

Thursday, December 18, 2025
BreachHave I Been PwnedDecember 18, 2025

The Botting Network

In August 2012, the forum for making money with botting "The Botting Network" suffered a data breach that exposed 96k user records . The now defunct vBulletin forum leaked 96k email addresses, usernames, dates of birth and salted MD5 password hashes.

96,320 accounts affectedOccurred 2012
Tuesday, July 25, 2023
BreachHave I Been PwnedJuly 25, 2023

BookCrossing

In August 2022, the book social networking site BookCrossing disclosed a data breach that dated back to a database backup from November 2012 . The incident exposed almost 1.6M records including names, usernames, email and IP addresses, dates of birth and...

1,582,323 accounts affectedOccurred 2012
Sunday, July 21, 2019
BreachHave I Been PwnedJuly 21, 2019

Xiaomi

In August 2012, the Xiaomi user forum website suffered a data breach . In all, 7 million email addresses appeared in the breach although a significant portion of them were numeric aliases on the bbs_ml_as_uid.xiaomi.com domain. Usernames, IP addresses and...

7,088,010 accounts affectedOccurred 2012
Monday, July 15, 2019
BreachHave I Been PwnedJuly 15, 2019

Netlog

In July 2018, the Belgian social networking site Netlog identified a data breach of their systems dating back to November 2012 (PDF) . Although the service was discontinued in 2015, the data breach still impacted 49 million subscribers for whom email...

49,038,354 accounts affectedOccurred 2012
Saturday, July 28, 2018
BreachHave I Been PwnedJuly 28, 2018

League of Legends

In June 2012, the multiplayer online game League of Legends suffered a data breach . At the time, the service had more than 32 million registered accounts and the breach affected various personal data attributes including "encrypted" passwords. In 2018, a...

339,487 accounts affectedOccurred 2012
Monday, October 30, 2017
BreachHave I Been PwnedOctober 30, 2017

JobStreet

In October 2017, the Malaysian website lowyat.net ran a story on a massive set of breached data affecting millions of Malaysians after someone posted it for sale on their forums. The data spanned multiple separate breaches including the JobStreet jobs website...

3,883,455 accounts affectedOccurred 2012
Friday, October 6, 2017
BreachHave I Been PwnedOctober 6, 2017

Disqus

In October 2017, the blog commenting service Disqus announced they'd suffered a data breach . The breach dated back to July 2012 but wasn't identified until years later when the data finally surfaced. The breach contained over 17.5 million unique email...

17,551,044 accounts affectedOccurred 2012
Tuesday, November 8, 2016
BreachHave I Been PwnedNovember 8, 2016

Lookbook

In August 2012, the fashion site Lookbook suffered a data breach . The data later appeared listed for sale in June 2016 and included 1.1 million usernames, email and IP addresses, birth dates and plain text passwords.

1,074,948 accounts affectedOccurred 2012
Monday, November 7, 2016
BreachHave I Been PwnedNovember 7, 2016

War Inc.

In mid-2012, the real-time strategy game War Inc. suffered a data breach. The attack resulted in the exposure of over 1 million accounts including usernames, email addresses and salted MD5 hashes of passwords.

1,020,136 accounts affectedOccurred 2012
Saturday, October 8, 2016
BreachHave I Been PwnedOctober 8, 2016

Taobao

In approximately 2012, it's alleged that the Chinese shopping site known as Taobao suffered a data breach that impacted over 21 million subscribers. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the...

21,149,008 accounts affectedOccurred 2012
BreachHave I Been PwnedOctober 8, 2016

126

In approximately 2012, it's alleged that the Chinese email service known as 126 suffered a data breach that impacted 6.4 million subscribers. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese...

6,414,191 accounts affectedOccurred 2012
Tuesday, September 20, 2016
BreachHave I Been PwnedSeptember 20, 2016

Last.fm

In March 2012, the music website Last.fm was hacked and 43 million user accounts were exposed. Whilst Last.fm knew of an incident back in 2012 , the scale of the hack was not known until the data was released publicly in September 2016. The breach included 37...

37,217,682 accounts affectedOccurred 2012
Wednesday, August 31, 2016
BreachHave I Been PwnedAugust 31, 2016

Dropbox

In mid-2012, Dropbox suffered a data breach which exposed the stored credentials of tens of millions of their customers. In August 2016, they forced password resets for customers they believed may be at risk . A large volume of data totalling over 68 million...

68,648,009 accounts affectedOccurred 2012
Tuesday, June 28, 2016
BreachHave I Been PwnedJune 28, 2016

WHMCS

In May 2012, the web hosting, billing and automation company WHMCS suffered a data breach that exposed 134k email addresses. The breach included extensive information about customers and payment histories including partial credit card numbers.

134,047 accounts affectedOccurred 2012
Thursday, June 9, 2016
BreachHave I Been PwnedJune 9, 2016

VK

In approximately 2012, the Russian social media site known as VK was hacked and almost 100 million accounts were exposed. The data emerged in June 2016 where it was being sold via a dark market website and included names, phone numbers email addresses and...

93,338,602 accounts affectedOccurred 2012
Saturday, May 21, 2016
BreachHave I Been PwnedMay 21, 2016

LinkedIn

In May 2016, LinkedIn had 164 million email addresses and passwords exposed . Originally hacked in 2012, the data remained out of sight until being offered for sale on a dark market site 4 years later. The passwords in the breach were stored as SHA1 hashes...

164,611,595 accounts affectedOccurred 2012
Sunday, January 24, 2016
BreachHave I Been PwnedJanuary 24, 2016

Heroes of Newerth

In December 2012, the multiplayer online battle arena game known as Heroes of Newerth was hacked and over 8 million accounts extracted from the system. The compromised data included usernames, email addresses and passwords.

8,089,103 accounts affectedOccurred 2012
Monday, January 18, 2016
BreachHave I Been PwnedJanuary 18, 2016

Gamigo

In March 2012, the German online game publisher Gamigo was hacked and more than 8 million accounts publicly leaked. The breach included email addresses and passwords stored as weak MD5 hashes with no salt.

8,243,604 accounts affectedOccurred 2012
Thursday, July 30, 2015
BreachHave I Been PwnedJuly 30, 2015

YouPorn

In February 2012, the adult website YouPorn had over 1.3M user accounts exposed in a data breach . The publicly released data included both email addresses and plain text passwords.

1,327,567 accounts affectedOccurred 2012