What was exposed, when it happened, and which databases confirm it.
- accounts
- 4,007,580
- Breached
- December 26, 2018
- Last Update
- July 19, 2019
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In December 2018, the tabletop role-playing games website Roll20 suffered a data breach. Almost 4 million customers were impacted by the breach and had email and IP addresses, names, bcrypt hashes of passwords and the last 4 digits of credit cards exposed. The data was provided to HIBP by a source who requested it be attributed to "[email protected]".
Compromised Info
- Email addresses
- IP addresses
- Names
- Partial credit card data
- Passwords
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via domain matching
- HIBP
FAQ
What was leaked in the Roll20 breach?
The Roll20 breach exposed: Email addresses, IP addresses, Names, Partial credit card data, and Passwords.
When did the Roll20 breach happen?
The Roll20 breach was disclosed on December 26, 2018 and affected 4,007,580 records.
Am I affected by the Roll20 breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Roll20 leak.