What was exposed, when it happened, and which databases confirm it.
- accounts
- 43,937,128
- Breached
- May 21, 2012
- Last Update
- June 28, 2016
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In May 2012, the web hosting, billing and automation company WHMCS suffered a data breach that exposed 134k email addresses. The breach included extensive information about customers and payment histories including partial credit card numbers.
Compromised Info
- Email addresses
- Email messages
- Employers
- IP addresses
- Names
- Partial credit card data
- Passwords
- Payment histories
- Physical addresses
- Website activity
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
43,803,081 accounts DEHASHED reports beyond HIBP
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via AI direct match to LeakCheck (70% confidence)
- HIBP
FAQ
What was leaked in the WHMCS breach?
The WHMCS breach exposed: Email addresses, Email messages, Employers, IP addresses, Names, Partial credit card data, Passwords, Payment histories, Physical addresses, and Website activity.
When did the WHMCS breach happen?
The WHMCS breach was disclosed on May 21, 2012 and affected 43,937,128 records.
Am I affected by the WHMCS breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the WHMCS leak.