858 accounts from WPSandbox (wpsandbox.io) were exposed in this breach. Besides email addresses, it included passwords, which makes it a high-risk breach.
Was your email address in this breach?
We display where your address leaked and what went with it. We never store the address.
We don't store your address. It is checked right here against about 1029 breaches, including this one.
Email addressesPasswords
In November 2018, the WordPress sandboxing service that allows people to create temporary websites WP Sandbox discovered their service was being used to host a phishing site attempting to collect Microsoft OneDrive accounts. After identifying the malicious site, WP Sandbox took it offline, contacted the 858 people who provided information to it then self-submitted their addresses to HIBP. The phishing page requested both email addresses and passwords.
Source: Have I Been Pwned (CC BY 4.0)