Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Breach occurred 2017-05-16Verifieddafont.com
What happened
In May 2017, font sharing site DaFont suffered a data breach resulting in the exposure of 637k records. Allegedly due to a SQL injection vulnerability exploited by multiple parties, the exposed data included usernames, email addresses and passwords stored as MD5 without a salt.
Data exposed
Frequently asked questions
The DaFont data breach occurred on May 16, 2017. It was added to Have I Been Pwned's breach catalog on May 18, 2017.
637,340 accounts were affected by the DaFont data breach, according to Have I Been Pwned's records.
The DaFont breach exposed the following data types: Email addresses, Passwords, Usernames.
Yes. Have I Been Pwned has verified the DaFont breach, meaning there's confirmed evidence the exposed data is genuine and tied to real accounts.
Use KazaSec's free Email Breach Checker (/tools/breach-check) to check whether a specific email address has surfaced in the DaFont breach, or any other known breach — the tool never stores what you search.
Our free Email Breach Checker tells you whether a specific email address has surfaced in this breach — or any other known breach — without ever storing what you search.
Check your email →Talk to us about this
We help organizations find and fix the gaps that lead to a breach, before they do.