Data breach
Club Penguin Rewritten (January 2018)cprewritten.net
1 688 176 accounts exposed in a breach dated 2018-01-21.
Breached2018-01-21Added to HIBP2019-04-23 UTCUpdated by HIBP2019-07-30 UTCAccounts1 688 176Domaincprewritten.net
Verified
What happened in Have I Been Pwned’s words
In January 2018, the children's gaming site Club Penguin Rewritten (CPRewritten) suffered a data breach (note: CPRewritten is an independent recreation of Disney's Club Penguin game). The incident exposed almost 1.7 million unique email addresses alongside IP addresses, usernames and passwords stored as bcrypt hashes. When contacted, CPRewritten advised they were aware of the breach and had "contacted affected users".
Exposed data as HIBP classifies it
- Email addresses
- IP addresses
- Passwords
- Usernames
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC