Skip to main content
Data breach

Gravatargravatar.com

113 990 759 accounts exposed in a breach dated 2020-10-03.

Breached2020-10-03Added to HIBP2021-12-05 UTCUpdated by HIBP2021-12-08 UTCAccounts113 990 759Domaingravatar.com
Verified

What happened in Have I Been Pwned’s words

In October 2020, a security researcher published a technique for scraping large volumes of data from Gravatar, the service for providing globally unique avatars . 167 million names, usernames and MD5 hashes of email addresses used to reference users' avatars were subsequently scraped and distributed within the hacking community. 114 million of the MD5 hashes were cracked and distributed alongside the source hash, thus disclosing the original email address and accompanying data. Following the impacted email addresses being searchable in HIBP, Gravatar release an FAQ detailing the incident.

Exposed data as HIBP classifies it

  • Email addresses
  • Names
  • Usernames

How HIBP qualifies it

  • HIBP verified that the data came from this service.

Source: Have I Been Pwned (CC BY 4.0)

Copied from HIBP 2026-11-05 03:50 UTC