Cloudpets – Jan 01, 2017
On Jan 01, 2017 attack happened. The maker of teddy bears that record childrens voices and sends them to family and friends via the internet CloudPets left their database publicly exposed and it was subsequently downloaded by external parties (the data was also subject to 3 different ransom demands). 583k records were provided to HIBP via a data trader and included email addresses and bcrypt hashes, but the full extent of user data exposed by the system was over 821k records and also included childrens names and references to portrait photos and voice recordings. On Feb 27, 2017 only breach discovered.