Skip to content
Cyber Breaches
Search
Data breachResolved

VK data breach (2012)

In approximately 2012, the Russian social media site known as VK was hacked and almost 100 million accounts were exposed. The data emerged in June 2016 where it was being sold via a dark market website and included names, phone numbers email addresses and plain text passwords.

Victim
VK
records
93.3M
SectorMedia

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2012-01-01, VK was affected by a data breach. Approximately 93,338,602 accounts were exposed. In approximately 2012, the Russian social media site known as VK was hacked and almost 100 million accounts were exposed. The data emerged in June 2016 where it was being sold via a dark market website and included names, phone numbers email addresses and plain text passwords.

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#VK
  2. vk.comhttps://vk.com

Related incidents

Data breachResolved

BookCrossing data breach (2012)

In August 2022, the book social networking site BookCrossing disclosed a data breach that dated back to a database backup from November 2012. The incident exposed almost 1.6M records including names, usernames, email and IP addresses, dates of birth and plain text passwords.

Victim
BookCrossing
Records
1.6M
Data breachResolved

The Botting Network data breach (2012)

In August 2012, the forum for making money with botting "The Botting Network" suffered a data breach that exposed 96k user records. The now defunct vBulletin forum leaked 96k email addresses, usernames, dates of birth and salted MD5 password hashes.

Victim
The Botting Network
Records
96.3K
Data breachResolved

JobStreet data breach (2012)

In October 2017, the Malaysian website lowyat.net ran a story on a massive set of breached data affecting millions of Malaysians after someone posted it for sale on their forums.

Victim
JobStreet
Records
3.9M
Data breachResolved

BCD Travel data breach (2026)

In May 2026, the corporate travel management company BCD Travel was claimed as a victim of the ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from BCD was subsequently published publicly in early June and contained 396k unique email addresses.

Victim
BCD Travel
Records
396.3K