Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Breach occurred 2008-07-01Verifiedmyspace.com
What happened
In approximately 2008, MySpace suffered a data breach that exposed almost 360 million accounts. In May 2016 the data was offered up for sale on the "Real Deal" dark market website and included email addresses, usernames and SHA1 hashes of the first 10 characters of the password converted to lowercase and stored without a salt. The exact breach date is unknown, but analysis of the data suggests it was 8 years before being made public.
Data exposed
Frequently asked questions
The MySpace data breach occurred on July 1, 2008. It was added to Have I Been Pwned's breach catalog on May 31, 2016.
359,420,698 accounts were affected by the MySpace data breach, according to Have I Been Pwned's records.
The MySpace breach exposed the following data types: Email addresses, Passwords, Usernames.
Yes. Have I Been Pwned has verified the MySpace breach, meaning there's confirmed evidence the exposed data is genuine and tied to real accounts.
Use KazaSec's free Email Breach Checker (/tools/breach-check) to check whether a specific email address has surfaced in the MySpace breach, or any other known breach — the tool never stores what you search.
Our free Email Breach Checker tells you whether a specific email address has surfaced in this breach — or any other known breach — without ever storing what you search.
Check your email →Talk to us about this
We help organizations find and fix the gaps that lead to a breach, before they do.