A breach of YouHack (Russia) was added to Have I Been Pwned’s breach database on 11 November 2026. It affected 7,160,849 accounts.
What we know as of
Status
Confirmed.
People affected
7,160,849 accounts.
What was exposed
Passwords and logins, Email addresses, Usernames and IP addresses.
When
Began 29 May 2013, first reported 11 November 2026.
How
Hacking.
YouHack’s record
No earlier breach on record under this name.
Not known yet: who was behind it. This page is updated as notices and statements come in.
Every fact above has its source below. Journalists: free to quote with credit (“Privacy Unpacked data breach tracker”, with a link to this page and the date); the figures can move. Follow this breach (feed) · Every major breach · Ask us for a figure
People affected
7,160,849accounts
Reported
11 November 2026Breach database and 1 more
Time to tell
4,914 daysfrom 29 May 2013 · the median is 147
Who is affected
People worldwide
What was exposed 4
Passwords and logins
Email addresses
Usernames
IP addresses
How it happened
How
Hacking which was hackedsourceOur translation from Ukrainianяка була зламана
Breach databases are read by code. News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes
A breach of YouHack (Russia) was added to Have I Been Pwned’s breach database on 11 November 2026. It affected 7,160,849 accounts. How it happened, by the sources: hacking.
What data was exposed in the YouHack breach?
Passwords and logins, Email addresses, Usernames and IP addresses, by the notices and reports on this page.
How do I know if I was affected?
Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.
Is there a YouHack data breach settlement?
No settlement open for claims is on record for YouHack as of 15 November 2026. Every open settlement is listed with its deadline.
Is a letter, email or text about the YouHack breach real or a scam?
A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to YouHack’s own site, or check the letter here.
Privacy Unpacked