Skip to main content
Data breach

WPSandboxwpsandbox.io

858 accounts exposed in a breach dated 2018-11-04.

Breached2018-11-04Added to HIBP2018-11-06 UTCUpdated by HIBP2018-11-06 UTCAccounts858Domainwpsandbox.io
Verified

What happened in Have I Been Pwned’s words

In November 2018, the WordPress sandboxing service that allows people to create temporary websites WP Sandbox discovered their service was being used to host a phishing site attempting to collect Microsoft OneDrive accounts. After identifying the malicious site, WP Sandbox took it offline, contacted the 858 people who provided information to it then self-submitted their addresses to HIBP. The phishing page requested both email addresses and passwords.

Exposed data as HIBP classifies it

  • Email addresses
  • Passwords

How HIBP qualifies it

  • HIBP verified that the data came from this service.

Source: Have I Been Pwned (CC BY 4.0)

Copied from HIBP 2026-11-05 03:50 UTC