Personal Data Leak Monitor

Thingiverse data breach

228K accounts from Thingiverse (thingiverse.com) were exposed in this breach. Besides email addresses, it included passwords, which makes it a high-risk breach.

Breach date
October 13, 2020
Accounts
228,102
Added to the database
October 14, 2021

Was your email address in this breach?

Check if your email has leaked

We display where your address leaked and what went with it. We never store the address.

We don't store your address. It is checked right here against about 1029 breaches, including this one.

What leaked

Dates of birthEmail addressesIP addressesNamesPasswordsPhysical addressesUsernames

What to do now

  1. Please change that password, and anywhere you reused it
  2. If your birthday is a PIN, kindly change it
  3. Do not tap links in emails claiming to be that service
  4. Expect scam emails that use your real name
  5. Be careful with unexpected mail or visitors

Tools that help with this breach

1PasswordPaidVisit the official site →(opens in a new tab)YubiKeyPaidVisit the official site →(opens in a new tab)

About this breach

In October 2021, a database backup taken from the 3D model sharing service Thingiverse began extensively circulating within the hacking community. Dating back to October 2020, the 36GB file contained 228 thousand unique email addresses, mostly alongside comments left on 3D models. The data also included usernames, IP addresses, full names and passwords stored as either unsalted SHA-1 or bcrypt hashes. In some cases, physical addresses was also exposed. Thingiverse's owner, MakerBot, is aware of the incident but at the time of writing, is yet to issue a disclosure statement. The data was provided to HIBP by dehashed.com.

Source: Have I Been Pwned (CC BY 4.0)

Similar breaches from the same period