Data breach
Disqusdisqus.com
17 551 044 accounts exposed in a breach dated 2012-07-01.
Breached2012-07-01Added to HIBP2017-10-06 UTCUpdated by HIBP2017-10-06 UTCAccounts17 551 044Domaindisqus.com
Verified
What happened in Have I Been Pwned’s words
In October 2017, the blog commenting service Disqus announced they'd suffered a data breach. The breach dated back to July 2012 but wasn't identified until years later when the data finally surfaced. The breach contained over 17.5 million unique email addresses and usernames. Users who created logins on Disqus had salted SHA1 hashes of passwords whilst users who logged in via social providers only had references to those accounts.
Exposed data as HIBP classifies it
- Email addresses
- Passwords
- Usernames
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC