← All datasets

imgur.com

Jan 1, 2013

1,755,561
Records
2
Files
May 14, 2026
Added

A breach of Imgur (imgur.com), a popular image hosting and sharing platform. The archive contains user account records in email:plaintext_password format, distributed via BreachForums. The data includes email addresses and plaintext passwords from a wide variety of international email providers. The breach was publicly disclosed in November 2019 by Troy Hunt/Have I Been Pwned, with Imgur confirming the breach originated in 2013 affecting approximately 1.75 million accounts. The passwords were originally stored as SHA-256 hashes which were subsequently cracked, resulting in the plaintext credential pairs seen in this file.

Data found in this dataset

Email

Search this dataset

Scoped to this dataset. Fill any combination — results match if any field hits.

Source files

Expand any file to inspect its column headers and the LLM's field-mapping reasoning, recorded during ingestion.

Breached_Info.txt
1 rows

File structure

Notes: This file is free-form text (prose/header content) rather than structured PII records. It contains breach context description, sourcing information, and credits from BreachForums. No delimited data rows are present in the provided sample. While the breach itself (imgur-2013) involved email:plaintext_password pairs, the text provided is metadata/documentation only, not the actual data table.

imgur.txt
2 columns1,755,560 rows

File structure

Source columnMapped fieldConfidenceLLM assessment
0emailhighAll values contain @ symbol with recognizable email domains (yahoo.com, gmail.com, hotmail.com, live.com, etc.)
1passwordhighValues are plaintext passwords (cracked from original SHA-256 hashes per breach context), showing typical password patterns including alphanumeric strings, common words, and mixed case with special characters

Notes: Standard email:password combo list from the Imgur 2013 breach. Passwords are plaintext credentials cracked from SHA-256 hashes. Delimiter is colon (:), though caution should be applied to any passwords that themselves contain colons — splitting should be done on the first colon only. Email addresses span a wide range of international providers including yahoo.com, gmail.com, hotmail.com, msn.com, live.com, att.net, and various country-specific domains (yahoo.ca, hotmail.co.uk, yahoo.co.uk, live.co.uk, go2.pl, wp.pl, sohu.com, live.no).

Articles about this breach