Club Penguin Rewritten (January 2018) – Jan 21, 2018
On Jan 21, 2018 attack happened. The childrens gaming site Club Penguin Rewritten (CPRewritten) suffered a data breach (note: CPRewritten is an independent recreation of Disneys Club Penguin game). The incident exposed almost 1.7 million unique email addresses alongside IP addresses, usernames and passwords stored as bcrypt hashes. When contacted, CPRewritten advised they were aware of the breach and had contacted affected users. On Apr 23, 2019 only breach discovered.