LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Data study

The biggest data breaches ever recorded

The largest data-exposure incidents by number of records, from the RecentBreaches database. Most are indexed in a public breach database, so the records themselves are established even where the company never issued a statement.

1 of the 25 rows below is marked claimed: the record count there is the figure an extortion group published about its own alleged theft, which nobody has verified.

#BreachRecordsRecord count
1Synthient Credential Stuffing Threat Data Data Breach (2025)2.0Bcorroborated
2Collection #1772.9Mcorroborated
3Verifications.io763.1Mcorroborated
4Onliner Spambot711.5Mcorroborated
5Data Enrichment Exposure From PDL Customer Data Breach (2019622.2Mcorroborated
6Exploit.In593.4Mcorroborated
7Facebook509.5Mcorroborated
8Anti Public Combo List458.0Mcorroborated
9River City Media Spam List393.4Mcorroborated
10Combolists Posted to Telegram361.5Mcorroborated
11MySpace359.4Mcorroborated
12ALIEN TXTBASE Stealer Logs284.1Mcorroborated
13Not SOCRadar282.5Mcorroborated
14Instructure280.0Mclaimed
15Wattpad268.8Mcorroborated
16NetEase234.8Mcorroborated
17Deezer229.0Mcorroborated
18Cit0day226.9Mcorroborated
19Twitter (200M)211.5Mcorroborated
20Synthient Stealer Log Threat Data183.0Mcorroborated
21Zynga172.9Mcorroborated
22Adult FriendFinder (2016)169.7Mcorroborated
23LinkedIn164.6Mcorroborated
24Dubsmash161.7Mcorroborated
25Adobe152.4Mcorroborated
Are you in any of these breaches?
Check your email against 15.4B breach records, free — run a scan on GalaxyWarden.
Methodology: figures are aggregated from breaches tracked in the RecentBreaches database, grouped by incident month. Free to cite with attribution to RecentBreaches.

More: all studies · monthly reports.