Cronos DeFi Project MM.Finance Suffers $2M Exploit
https://www.oodaloop.com/technology/2022/05/05/cronos-defi-project-mm-finance-suffers-2m-exploit/

He cracked passwords for a living – now he’s serving 4 years in prison
https://nakedsecurity.sophos.com/2022/05/13/he-cracked-passwords-for-a-living-now-hes-serving-4-years-in-prison/

Oklahoma City Indian Clinic Data Breach Affects 40,000 Individuals
https://www.oodaloop.com/briefs/2022/05/13/oklahoma-city-indian-clinic-data-breach-affects-40000-individuals/

DEA Investigating Breach of Law Enforcement Data Portal
https://krebsonsecurity.com/2022/05/dea-investigating-breach-of-law-enforcement-data-portal/

Researchers Find 31,000 FTSE 100 Logins on Dark Web
https://www.oodaloop.com/briefs/2022/05/10/researchers-find-31000-ftse-100-logins-on-dark-web/

Read Novel (unverified) - 22,424,472 breached accounts
https://haveibeenpwned.com/PwnedWebsites#ReadNovel

Paragon Cheats - 188,089 breached accounts
https://haveibeenpwned.com/PwnedWebsites#ParagonCheats

In May 2021, the Grand Theft Auto Online cheats website "Paragon Cheats" suffered a data breach that lead to the shutdown of the service. The breach exposed 188k customer records including usernames, email and IP addresses. The data was provided to HIBP by a source who requested it be attributed to "VRAirhead and xFueY".

BlackBerry Fans - 174,168 breached accounts
https://haveibeenpwned.com/PwnedWebsites#BlackBerryFans

In May 2022, the Chinese BlackBerry enthusiasts website BlackBerry Fans (https://blackberryfans.org/) suffered a data breach that exposed 174k member records. The impacted data included usernames, email and IP addresses and passwords stored as salted MD5 hashes.

OGUsers (2021 breach) - 348,302 breached accounts
https://haveibeenpwned.com/PwnedWebsites#OGUsers2021

In April 2021, the account hijacking and SIM swapping forum OGusers suffered a data breach (https://www.bleepingcomputer.com/news/security/fourth-times-a-charm-ogusers-hacking-forum-hacked-again/), the fourth since December 2018. The breach was subsequently sold on a rival hacking forum and contained usernames, email and IP addresses and passwords stored as either salted MD5 or argon2 hashes. A total of 348k unique email addresses appeared in the breach.

:)

Fanpass - 112,251 breached accounts
https://haveibeenpwned.com/PwnedWebsites#Fanpass

In April 2022, the UK based website for buying and selling soccer tickets Fanpass suffered a data breach (https://milled.com/fanpass/fanpass-incident-notification-V6odeYPOxOTPZFq-) which exposed 112k customer records. Impacted data includes names, phone numbers, physical addresses, purchase histories and salted password hashes. The data was provided to HIBP by a source who requested it be attributed to "breaches.net".

SirHurt - 90,655 breached accounts
https://haveibeenpwned.com/PwnedWebsites#SirHurt

In April 2021, the the Roblox cheats website SirHurt suffered a data breach (https://wearedevs.net/forum/t/20397) that exposed over 90k customer records. The exposed data included email and IP addresses, usernames and passwords stored as MD5 hashes.

Once again a "hacker" site using md5...

Ransomware Hackers Steal Personal Data of 500,000 Students and Staff in Chicago
https://www.oodaloop.com/cyber/2022/05/23/ransomware-hackers-steal-personal-data-of-500000-students-and-staff-in-chicago/

Wendy's - 52,485 breached accounts
https://haveibeenpwned.com/PwnedWebsites#Wendys

In March 2018, Wendy's in the Philippines suffered a data breach (https://www.rappler.com/technology/202040-wendys-philippines-data-breach/) which impacted over 52k customers and job applicants. The breach exposed extensive personal information including names, email and IP addresses, physical addresses, phone numbers and passwords stored as MD5 hashes.

So much md5 recently lol

Amart Furniture - 108,940 breached accounts
https://haveibeenpwned.com/PwnedWebsites#AmartFurniture

In May 2022, the Australian retailer Amart Furniture advised that their warranty claims database hosted on Amazon Web Services had been the target of a cyber attack (https://www.ozbargain.com.au/node/701231). Over 100k records containing email and physical address, names, phone numbers and passwords stored as bcrypt hashes were exposed and shared online by the attacker.

Preen.Me - 236,105 breached accounts
https://haveibeenpwned.com/PwnedWebsites#PreenMe

In May 2020, social media marketing company Preen.Me was the target of a ransom attack that resulted in hundreds of thousands of records being publicly posted (https://www.riskbasedsecurity.com/2020/06/24/personal-data-of-350000-social-media-influencers-and-users-compromised-following-preen-me-hack/). Over 236k unique email addresses were exposed in the attack alongside names, usernames and links to social media profiles.

MGM Resorts (2022 Update) - 24,842,001 breached accounts
https://haveibeenpwned.com/PwnedWebsites#MGM2022Update

In July 2019, MGM Resorts discovered a data breach of one of their cloud services (https://www.zdnet.com/article/exclusive-details-of-10-6-million-of-mgm-hotel-guests-posted-on-a-hacking-forum/). The breach included 10.6M guest records with 3.1M unique email addresses stemming back to 2017. In May 2022, a superset of the data totalling almost 25M unique email addresses across 142M rows was extensively shared on Telegram (https://www.vpnmentor.com/blog/mgm-leaked-on-telegram/). On analysis, it's highly likely the data stems from the same incident with 142M records having been discovered for sale on a dark web marketplace in mid-2020 (https://www.zdnet.com/article/a-hacker-is-selling-details-of-142-million-mgm-hotel-guests-on-the-dark-web/). The exposed data included email and physical addresses, names, phone numbers and dates of birth.