Data breach
WPSandboxwpsandbox.io
858 accounts exposed in a breach dated 2018-11-04.
Breached2018-11-04Added to HIBP2018-11-06 UTCUpdated by HIBP2018-11-06 UTCAccounts858Domainwpsandbox.io
Verified
What happened in Have I Been Pwned’s words
In November 2018, the WordPress sandboxing service that allows people to create temporary websites WP Sandbox discovered their service was being used to host a phishing site attempting to collect Microsoft OneDrive accounts. After identifying the malicious site, WP Sandbox took it offline, contacted the 858 people who provided information to it then self-submitted their addresses to HIBP. The phishing page requested both email addresses and passwords.
Exposed data as HIBP classifies it
- Email addresses
- Passwords
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC