Club Penguin Rewritten (January 2018) – Jan 21, 2018

On  Jan 21, 2018  attack happened.  The childrens gaming site Club Penguin Rewritten (CPRewritten) suffered a data breach (note: CPRewritten is an independent recreation of Disneys Club Penguin game). The incident exposed almost 1.7 million unique email addresses alongside IP addresses, usernames and passwords stored as bcrypt hashes. When contacted, CPRewritten advised they were aware of the breach and had contacted affected users.  On   Apr 23, 2019   only breach discovered.