What was exposed, when it happened, and which databases confirm it.
- accounts
- 26,815
- Breached
- March 11, 2016
- Last Update
- October 5, 2017
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In March 2016, the DDoS protection service Staminus was "massively hacked" resulting in an outage of more than 20 hours and the disclosure of customer credentials (with unsalted MD5 hashes), support tickets, credit card numbers and other sensitive data. 27k unique email addresses were found in the data which was subsequently released to the public. Staminus is no longer in operation.
Compromised Info
- Credit cards
- Email addresses
- IP addresses
- Passwords
- Support tickets
- Usernames
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- HIBP
FAQ
What was leaked in the Staminus breach?
The Staminus breach exposed: Credit cards, Email addresses, IP addresses, Passwords, Support tickets, and Usernames.
When did the Staminus breach happen?
The Staminus breach was disclosed on March 11, 2016 and affected 26,815 records.
Am I affected by the Staminus breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Staminus leak.