Blog

A Click.org dataset indexed by leaksear.ch exposes 89,889 account records, including emails, usernames, IP addresses, phone numbers, postal addresses, plaintext passwords, and MD5-hashed passwords. Security teams should treat the credentials and contact data as exposed and review Click.org-linked accounts and integrations.

A Clf09.com (草榴社區) forum leak indexed by leaksear.ch contains roughly 2.5 million records with usernames, email addresses, and hashed passwords. Public records list a Clf09.com leak entry from August 2022, but the intrusion method and official disclosure remain unconfirmed.

A Business Gazeta dataset indexed by leaksear.ch contains 155,663 records tied to account and contact data. The exposed fields include emails, usernames, hashed passwords, names, phone numbers, dates of birth, and IP addresses.

Atmeltomo, a Japanese email-friend and pen-pal service, has a 2021 leak indexed with 579,885 records. The data includes emails, usernames, IP addresses, profile details, optional birthdates, and unsalted MD5 password hashes.

A leaked ArmA 3 Life user database indexed by leaksear.ch contains 125,358 records, including emails, usernames, dates of birth, IP addresses, Steam IDs, and salted password hashes. Public sources identify ArmA 3 Life as an Arma 3 roleplay mod community, but the exposure method is not confirmed.

A leak tied to Air Miles España, operator of Spain’s Travel Club loyalty program, exposes 5.1 million records. The indexed data includes names, emails, usernames, dates of birth, and loyalty account metadata.

A Zara leak tied to Inditex has been indexed by leaksear.ch with 151,368,047 records, including emails, country data and purchase related fields. Public reporting says the incident involved a former technology provider and that passwords and payment information were not affected.