For detailed background on this incident, read Password reuse, credential stuffing and another billion records in Have I been pwned.
Compromised data: Email addresses, Passwords In May 2016, the the online gaming site Army Force Online suffered a data breach that exposed 1.5M accounts.
This information is also available via an RSS feed.
Sensitive breach, not publicly searchable Retired breach, removed from system Unverified breach, may be sourced from elsewhere Fabricated breach, likely not legitimate Spam List, used for spam marketing In approximately March 2015, the free web hosting provider 000webhost suffered a major data breach that exposed over 13 million customer records.
Compromised data: Email addresses, Passwords, Usernames In November 2015, the gaming website dedicated to classic DOS games Abandonia suffered a data breach resulting in the exposure of 776k unique user records.
The data contained email and IP addresses, usernames and salted MD5 hashes of passwords.
The data was sold and traded before 000webhost was alerted in October.