Notices by Have I Been Pwned (haveibeenpwned@infosec.exchange)

New sensitive breach: Spyware service Spyic had almost 876k email addresses breached this month. The exploited vulnerability also granted access to captured messages, photos, call logs, and more. 46% were already in @haveibeenpwned. Read more: https://techcrunch.com/2025/02/20/stalkerware-apps-cocospy-spyic-exposing-phone-data-of-millions-of-people/

New breach: The DragonNest MMORGP had over 500k unique email addresses breached in 2013. Data also included username, IP address and plain text password. 81% were already in @haveibeenpwned. Read more: https://cybernews.com/security/billions-passwords-credentials-leaked-mother-of-all-breaches/

New breach: More than 90M rows of French citizen data with 28M unique email addresses was found publicly facing in Sep. Data included name, IP, physical address and partial card data. 70% were already in @haveibeenpwned. Read more: https://cybernews.com/security/french-records-exposed-by-mysterious-data-hoarder/