Breach registry
Gravatar Data Breach
What was exposed, when it happened, and which databases confirm it.
- accounts
- 113,990,759
- Breached
- October 3, 2020
- Last Update
- December 8, 2021
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In October 2020, a security researcher published a technique for scraping large volumes of data from Gravatar, the service for providing globally unique avatars . 167 million names, usernames and MD5 hashes of email addresses used to reference users' avatars were subsequently scraped and distributed within the hacking community. 114 million of the MD5 hashes were cracked and distributed alongside the source hash, thus disclosing the original email address and accompanying data. Following the impacted email addresses being searchable in HIBP, Gravatar release an FAQ detailing the incident.
Compromised Info
- Email addresses
- Names
- Usernames
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- Dehashed— linked via domain matching
- HIBP
FAQ
What was leaked in the Gravatar breach?
The Gravatar breach exposed: Email addresses, Names, and Usernames.
When did the Gravatar breach happen?
The Gravatar breach was disclosed on October 3, 2020 and affected 113,990,759 records.
Am I affected by the Gravatar breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Gravatar leak.