Public breach reports where passwords (hashed) were listed among exposed data types.
LegionProxy, a commercial residential and ISP proxy network, suffered a data breach in April 2026 that exposed approximately 10,000 accounts including email addresses, names, bcrypt password hashes, and purchase records.
SUCCESS, a personal development media brand, suffered a data breach in March 2026 exposing approximately 253,510 accounts with names, email addresses, phone numbers, and other personal information.
RuneScape Boards, a vBulletin-based forum, suffered a data breach in 2011 that exposed approximately 223,000 user accounts.
BreachForums Version 5, a hacking forum, suffered a breach in March 2026 exposing approximately 340,000 user accounts with email addresses, usernames, and password hashes.