AnimeLeague – 192,134 breached accounts

In July 2024, AnimeLeague disclosed a data breach of their services. The data was posted for sale on a popular hacking forum and included 2 databases covering both event registration records and a dump of the phpBB bulletin board. The impacted data included passwords in various hashed formats including SHA-1, salted md5 and bcrypt, as well as usernames, private messages, dates of birth, purchases and 192k unique email addresses.

Read More

Ubook – 699,908 breached accounts

In July 2024, 700k unique email addresses from the audiobook platform Ubook were posted to a popular hacking forum. Allegedly scraped from the service, the data appears to be sourced from the Ubook Exchange (UBX) and also includes names, genders, dates of birth and links to profile photos.

Read More

Spytech – 5,645 breached accounts

In July 2024, spyware maker Spytech suffered a data breach that exposed data collected as recently as the previous month. Designed to “invisibly record everything users do”, the breach exposed information related to both purchasers and targets of the product. Target data collection (and subsequent exposure) included the infected computer name, browsing history, applications used, usernames of authenticated users, keywords being monitored, file operations (creation and deletion), computer usage times and email addresses, often captured within the spyware’s logs. The data also included the names, purchases and md5 password hashes of purchasers.

Read More
X