Data breaches in 2021
78 tracked incidents from 2021

AndroidLista
In July 2021, the Android applications and games review site AndroidLista suffered a data breach. The incident exposed 6.6M user records containing email addresses, names, usernames and passwords stored as salted SHA-1 hashes, all of which were subsequently...

Phoenix
In mid-2021, the "vintage messaging reborn" service Phoenix suffered a data breach that exposed 75k unique email addresses. The breach also exposed IP addresses, usernames and passwords.

Bookchor
In January 2021, the Indian book trading website Bookchor suffered a data breach that exposed half a million customer records . The exposed data included email and IP addresses, names, genders, dates of birth, phone numbers and passwords stored as unsalted...

Bourse des Vols
In January 2021, the French travel company Bourse des Vols suffered a data breach that exposed 1.46M unique email addresses across more than 1.2k .sql files and over 9GB of data. The impacted data exposed personal information and travel histories including...

CTARS
In May 2022, the client management system for the Australian government's NDIS (National Disability Insurance Scheme) suffered a data breach which was subsequently posted to an online hacking forum . The CTARS cloud platform is used by care providers to...

Adecco
In March 2021, news broke of a massive data breach impacting millions of Adecco customers in South America which was subsequently sold on a popular hacking forum. The breach exposed over 4M unique email addresses as well as genders, dates of birth, marital...

Open Subtitles
In August 2021, the subtitling website Open Subtitles suffered a data breach and subsequent ransom demand . The breach exposed almost 7M subscribers' personal data including email and IP addresses, usernames, the country of the user and passwords stored as...

Upstox
In April 2021, Indian brokerage firm Upstox suffered a data breach . The incident exposed extensive personal information on over 100k customers including names, genders, dates of birth, physical addresses, banking information and passwords stored as bcrypt...
































































